io.opentelemetry opentelemetry-api

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-452921.62.0opentelemetry-java: Unbounded Memory Allocation in W3C Baggage PropagationHIGH 7.51.1 %