OP
Product
opentelemetry-java-instrumentation
by open-telemetry · last CVE Jul 1, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch

Add opentelemetry-java-instrumentation to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54704
6.5
0%
Jul 1
OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords
Affected: < 2.28.0
CVE-2023-39951
6.5
1%
Aug 8
Instrumentation for AWS SDK v2 captures email content when using Amazon Simple Email Service (SES) v1 API, exposing that content to the telemetry backend
Affected: < 1.28.0
Showing 2