@opentelemetry/instrumentation-mysql2 vulnerabilities (npm)

1 vulnerability.

• @opentelemetry/instrumentation-mysql2 npm Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute CVE-2026-104872 Fix available 5.8 MediumOctober 2, 2026