open-telemetry opentelemetry-java-instrumentation vulnerabilities
4 published CVEs name open-telemetry opentelemetry-java-instrumentation among the affected products.
- Published CVEs
- 4
- Last 12 months
- 3
- Critical
- 1
- Known exploited
- 0
Critical 1High 0Medium 3Low 0Not scored 0
CVEs per yearBy the year they were published
- 20231
- 20263
Newest CVEs
- CVE-2026-54712
OpenTelemetry Javaagent RMI context propagation allows resource exhaustion
open-telemetry · opentelemetry-java-instrumentation
Medium5.3 - CVE-2026-54704
OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords
open-telemetry · opentelemetry-java-instrumentation
Medium6.5 - CVE-2026-33701
OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution
open-telemetry · opentelemetry-java-instrumentation
Critical9.3 - CVE-2023-39951
Instrumentation for AWS SDK v2 captures email content when using Amazon Simple Email Service (SES) v1 API, exposing that content to the telemetry backend
open-telemetry · opentelemetry-java-instrumentation
Medium6.5