Product by Open-telemetry

    Opentelemetry-java-instrumentation

    4 known vulnerabilities in Opentelemetry-java-instrumentation (Open-telemetry), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Opentelemetry-java-instrumentation (Open-telemetry)
    CriticalCVE-2026-33701

    OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution

    also in 1 other product

    		9.8
    HighCVE-2026-54712

    OpenTelemetry Javaagent RMI context propagation allows resource exhaustion

    also in 1 other product

    		7.5
    MediumCVE-2023-39951

    Opentelemetry-java-instrumentation: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		6.5
    MediumCVE-2026-54704

    OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords

    also in 1 other product

    		6.5

    All products by Open-telemetry