io.opentelemetry:opentelemetry-api vulnerabilities (Maven)

2 vulnerabilities.

• io.opentelemetry:opentelemetry-api Maven opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing CVE-2026-118259 Fix available 5.3 MediumOctober 28, 2026
• io.opentelemetry:opentelemetry-api Maven opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation CVE-2026-45292 Fix available 5.3 MediumMay 14, 2026