opentelemetry-api vulnerabilities
CVEs whose affected-version data names the opentelemetry-api package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-114603Medium· 5.3OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api
OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api
▾ Sunlitopentelemetry-api · opentelemetry-apiEPSS 0.49%via OSV
CVE-2026-45292Medium· 5.3⚖ disputedopentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API
opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerability affects the baggage propagation implementation in opente…
▾ Sunlitopen-telemetry · opentelemetry-javaEPSS 1.1%via NVD