io.opentelemetry:opentelemetry-api
Maven2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting io.opentelemetry:opentelemetry-apipage 1 of 1
- CVE-2026-118259MEDIUMCVSS 5.3EG 5.3fixed in 1.67.02026-10-28
vulnerable: 0.10.0 ... 1.9.1 (105 versions)
opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.67.0, W3CTraceContextPropagator.extract() uses regex delimiter processing that c…
- CVE-2026-45292MEDIUMCVSS 5.3EG 5.3fixed in 1.62.02026-05-28
vulnerable: 0.10.0 ... 1.9.1 (100 versions)
opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerability affects the baggage propagation implementation in opentele…
Check whether io.opentelemetry:opentelemetry-api is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for io.opentelemetry:opentelemetry-api CVEs against the assets you own.
Book a Demo →