Product · open-telemetry

opentelemetry-python

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.3

CVE-2026-116694

OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation

OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract() in opentelemetry-propagator-jaeger processes inbound uberctx-* baggage values without entry, per-entry byte, or total-byte limits. Services tha…

open-telemetry opentelemetry-python python-opentelemetry python-opentelemetry Debian Ubuntu PyPI

Oct 27, 2026
Medium 5.3

CVE-2026-114603

OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api

OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.1, the opentelemetry-api function TraceState.from_header in opentelemetry/trace/span.py, reached through TraceContextTextMapPropagator.extract, parses inbound W3C tracestate…

open-telemetry opentelemetry-python python-opentelemetry python-opentelemetry Debian Ubuntu PyPI

Oct 22, 2026