Open-telemetry Opentelemetry-js
3 CVEs affecting Open-telemetry Opentelemetry-js. Latest disclosed: 2026-07-08. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-59892 | High | 7.5 | 2026-07-08 | OpenTelemetry JavaScript is the OpenTelemetry JavaScript client. Prior to 2.9.0, @opentelemetry/propagator-jaeger decodes incoming uber-trace-id and uberctx-*… |
CVE-2026-44902 | High | 7.5 | 2026-05-27 | opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTTP request crashes any Node.js process running the OpenTelemetr… |
CVE-2026-54285 | Medium | 5.3 | 2026-06-22 | opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 2.8.0, W3CBaggagePropagator.extract() in @opentelemetry/core does not enforce size limits whe… |