Login Request a demo
OP
Product
opentelemetry-js-contrib
by open-telemetry · last CVE Oct 2, 2026
1
CVEs
0
On KEV
5.8
Max CVSS
1
New 30D
Vulnerabilities1In the news0Timeline
Severity mix
Critical 0High 0Medium 1Low 0
Severity
All severities1Critical0High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add opentelemetry-js-contrib to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-104872
5.8
0%
Oct 2
Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute
Affected: < 27e172a9e0d549559056ccd58f27d13467454156
Showing 1