io.opentelemetry.javaagent:opentelemetry-javaagent vulnerabilities
CVEs whose affected-version data names the io.opentelemetry.javaagent:opentelemetry-javaagent package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-54712Medium· 5.3OpenTelemetry Javaagent RMI context propagation allows resource exhaustion
OpenTelemetry Javaagent RMI context propagation allows resource exhaustion
▾ Sunlitopentelemetry · io.opentelemetry.javaagent:opentelemetry-javaagentEPSS 0.26%via GHSA
CVE-2026-54704Medium· 6.5OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords
OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords
▾ Sunlitopentelemetry · io.opentelemetry.javaagent:opentelemetry-javaagentEPSS 0.38%via GHSA