Skip to content
OpenAdvisories

Package · npm

@opentelemetry/propagator-jaeger

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-59892

    OpenTelemetry JavaScript: Denial of service in `JaegerPropagator` via unhandled exception on a malformed header

    OpenTelemetry JavaScript is the OpenTelemetry JavaScript client. Prior to 2.9.0, @opentelemetry/propagator-jaeger decodes incoming uber-trace-id and uberctx-* HTTP header values with decodeURIComponent() without handling decode errors, allowing an unauthentic…

    open-telemetry opentelemetry-js @opentelemetry/propagator-jaeger npm