What’s Vulnerable › Products

open-telemetry opentelemetry-js-contrib vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your open-telemetry opentelemetry-js-contrib version is affected

Latest open-telemetry opentelemetry-js-contrib vulnerabilities

• CVE-2026-104872 — Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute (CVSS 5.8)