All 1 CVE vulnerabilities found in opentelemetry-js-contrib, with AI-generated Chinese analysis, references, and POCs.
Vendor: open-telemetry
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-104872 | Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute CWE-532 | 5.8 | Medium | 2026-10-02 |
All 1 known CVE vulnerabilities affecting opentelemetry-js-contrib with full Chinese analysis, references, and POCs where available.