All 3 CVE vulnerabilities found in opentelemetry-js, with AI-generated Chinese analysis, references, and POCs.
Vendor: open-telemetry
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-59892 | OpenTelemetry JavaScript: Denial of service in `JaegerPropagator` via unhandled exception on a malformed header CWE-248 | 7.5 | High | 2026-07-08 |
| CVE-2026-54285 | opentelemetry-js: Unbounded memory allocation in W3C Baggage propagation CWE-770 | 5.3 | Medium | 2026-06-22 |
| CVE-2026-44902 | opentelemetry-js: Prometheus exporter process crash via malformed HTTP request CWE-755 | 7.5 | High | 2026-05-27 |
All 3 known CVE vulnerabilities affecting opentelemetry-js with full Chinese analysis, references, and POCs where available.