Opentelemetry Instrumentation For Java vulnerabilities

Product

Opentelemetry Instrumentation For Java

by Linuxfoundation · last CVE Jul 1, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 1Medium 2Low 0

Severity

Exploitation

Watch

Add Opentelemetry Instrumentation For Java to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-33701	9.8	1%	Mar 27	OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java Affected: before 2.26.1
CVE-2026-54712	7.5	0%	Jul 1	OpenTelemetry Javaagent RMI context propagation allows resource exhaustion Affected: 2.26.1 before 2.27.0
CVE-2026-54704	6.5	0%	Jul 1	OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords Affected: before 2.28.0
CVE-2023-39951	6.5	1%	Aug 8	OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java Affected: before 1.28.0