otel has 2 CVEs on record. 1 was published in the last 90 days.
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- —
- Publish → KEV
- —
- Last 90 days
- 1 prev 1
Products
- go.opentelemetry.io/otel/bridge/opentracing 1
- go.opentelemetry.io/otel/schema/v1.1 1
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
otel vulnerabilities
CVEs affecting otel, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-45404MediumOpenTelemetry-Go is the Go implementation of OpenTelemetry
OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 0.11.0 through 1.44.0, the OpenTracing bridge's bridgeSpan contains an unsynchronized extraBaggageItems map which can cause a panic. Because Go maps are not safe fo…
▾ Sunlitotel · go.opentelemetry.io/otel/bridge/opentracingEPSS 0.13%via NVD
CVE-2026-45287Lowopentelemetry-go's Schema ParseFile leaks file descriptors on each parse
opentelemetry-go's Schema ParseFile leaks file descriptors on each parse
▾ Sunlitotel · go.opentelemetry.io/otel/schema/v1.1EPSS 0.17%via OSV