What’s Vulnerable › Products

open-telemetry opentelemetry-java vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your open-telemetry opentelemetry-java version is affected

Latest open-telemetry opentelemetry-java vulnerabilities

• CVE-2026-118259 — opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing (CVSS 5.3)
• CVE-2026-45292 — opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation (CVSS 5.3)