opentelemetry-java vulnerabilities

CVEs whose affected-version data names the opentelemetry-java package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-45292Medium· 5.3⚖ disputed

4mo ago

opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API

opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerability affects the baggage propagation implementation in opente…

▾ Sunlitopen-telemetry · opentelemetry-javaEPSS 1.1%via NVD