open-telemetry opentelemetry-java vulnerabilities (CVE)

CVE records published for open-telemetry opentelemetry-java, newest first. Follow to get an email when a new one appears.

2 results
5.3Medium
CVE-2026-45292

opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation

open-telemetry opentelemetry-java; io.opentelemetry opentelemetry-api; io.opentelemetry opentelemetry-extension-trace-propagators; Red Hat Red Hat Data Grid 8.6.2

opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerability affects the baggage propagation implementation in opentelemetry-api and opente…

1.1%EPSS