Security: open-telemetry/opentelemetry-java-instrumentation
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
OpenTelemetry Javaagent RMI context propagation allows resource exhaustionGHSA-fq3f-m5qm-99f5 published
Jun 9, 2026 by traskModerate -
Unsafe deserialization in RMI instrumentation may lead to remote code executionGHSA-xw7x-h9fj-p2c7 published
Mar 23, 2026 by traskCritical -
JDBC Auto-Instrumentation Logging Clear-Text PasswordsGHSA-rwqx-fvqh-6wm4 published
Jun 9, 2026 by traskModerate -
Instrumentation for AWS SDK v2 captures email content when using Amazon Simple Email Service (SES) v1 API, exposing that content to the telemetry backendGHSA-hghr-r469-gfq6 published
Aug 8, 2023 by traskModerate