Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

opentelemetry-java-instrumentation — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in opentelemetry-java-instrumentation, with AI-generated Chinese analysis, references, and POCs.

Vendor: open-telemetry

CVE IDTitleCVSSSeverityPublished
CVE-2026-54712 OpenTelemetry Javaagent RMI context propagation allows resource exhaustion CWE-400 5.3 Medium2026-07-01
CVE-2026-54704 OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords CWE-532 6.5 Medium2026-07-01
CVE-2026-33701 OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution CWE-502 8.1 -2026-03-27
CVE-2023-39951 Instrumentation for AWS SDK v2 captures email content when using Amazon Simple Email Service (SES) v1 API, exposing that content to the telemetry backend CWE-200 6.5 Medium2023-08-08

All 4 known CVE vulnerabilities affecting opentelemetry-java-instrumentation with full Chinese analysis, references, and POCs where available.