io.opentelemetry.javaagent:opentelemetry-javaagent

3 results · Feed

• Medium 5.3
  CVE-2026-54712

  OpenTelemetry Javaagent RMI context propagation allows resource exhaustion

  OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.27.0, the RMI context propagation payload reader limits the number of context entries but does not limit the aggregat…

  open-telemetry opentelemetry-java-instrumentation io.opentelemetry.javaagent:opentelemetry-javaagent Maven
  Jul 1, 2026
• Medium 6.5
  CVE-2026-54704

  OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords

  OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.28.0, the JDBC auto-instrumentation may fail to sanitize passwords in SQL CONNECT statements when the password is dou…

  open-telemetry opentelemetry-java-instrumentation io.opentelemetry.javaagent:opentelemetry-javaagent Maven
  Jul 1, 2026
• Critical 9.3
  CVE-2026-33701 Public exploit

  OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution

  OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.26.1, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serializa…

  open-telemetry opentelemetry-java-instrumentation io.opentelemetry.javaagent:opentelemetry-javaagent Maven
  Mar 27, 2026