python-opentelemetry

3 results · Clear filters · Feed

• Medium 6.3
  CVE-2026-116694

  OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation

  OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract() in opentelemetry-propagator-jaeger processes inbound uberctx-* baggage values without entry, per-entry byte, or total-byte limits. Services tha…

  open-telemetry opentelemetry-python python-opentelemetry python-opentelemetry Debian Ubuntu PyPI
  Oct 27, 2026
• Medium 5.3
  CVE-2026-114603

  OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api

  OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.1, the opentelemetry-api function TraceState.from_header in opentelemetry/trace/span.py, reached through TraceContextTextMapPropagator.extract, parses inbound W3C tracestate…

  open-telemetry opentelemetry-python python-opentelemetry python-opentelemetry Debian Ubuntu PyPI
  Oct 22, 2026
• Medium 6.5
  CVE-2026-112006

  OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 Improper Certificate Validation

  OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certificate validation vulnerability that disables TLS verification when OTEL_EXPORTER_OTLP_CERTIFICATE variables are empty strings. Man-in-the-middle attackers can …

  @opentelemetry opentelemetry-exporter-otlp-proto-http python-opentelemetry python-opentelemetry Debian Ubuntu
  Oct 18, 2026