Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

63 records

Priority LOW 31

opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0049 Published 2026-10-28 Fixed in 1.67.0 CWE-1333
Priority LOW 35

OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certificate validation vulnerability that disables TLS verification when OTEL_EXPORTER_OTLP_CERTIFICATE variables are empty st…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00215 Published 2026-10-18 Partial fix · 1.45.0 CWE-295
Priority MEDIUM 57

OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, and logs.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00437 Published 2026-09-14 Fixed in 0.154.0 CWE-22
Load more