O
Vendor security profile
opentelemetry
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs18
Critical0
CISA KEV0
Public exploit14
Patch rate%28
Avg. CVSS6.2
12-month vulnerability rate
0
0
0
0
0
3
1
13
0
0
0
1
CVE KEV
CVE severity distribution
18toplam CVE
High7 (39%)
Medium10 (56%)
Low1 (6%)
Patch and exploitation view
%28
Verified patch
%0
CISA KEV
%78
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
13Unknown
Latest vulnerabilities
5.8
CVE-2026-104872
Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute
O
Patch status unknownEPSS %0
5.3
CVE-2026-54285
Resource allocation without limits in Opentelemetry
O
Patch verifiedEPSS %0
5.5
CVE-2026-45287
Vulnerability in Opentelemetry Telemetry Schema Files
O
Patch verifiedEPSS %0
5.3
CVE-2026-41178
Vulnerability in Opentelemetry
O
Patch verifiedEPSS %0
7.5
CVE-2026-45686
Integer overflow in Opentelemetry Ebpf Instrumentation
O
Patch status unknownEPSS %1
7.5
CVE-2026-45685
Improper input validation in Opentelemetry Ebpf Instrumentation
O
Patch status unknownEPSS %1
5.3
CVE-2026-45684
Out-of-bounds write in Opentelemetry Ebpf Instrumentation
O
Patch status unknownEPSS %0
3.8
CVE-2026-45683
Information exposure in Opentelemetry Ebpf Instrumentation
O
Patch status unknownEPSS %0
5.5
CVE-2026-45682
Resource allocation without limits in Opentelemetry Ebpf Instrumentation
O
Patch status unknownEPSS %0
5.9
CVE-2026-45681
Out-of-bounds read in Opentelemetry Ebpf Instrumentation
O
Patch status unknownEPSS %0