Open-telemetry Opentelemetry-java-instrumentation vulnerabilities

• linuxfoundation opentelemetry instrumentation for java, open-telemetry opentelemetry-java-instrumentation +1 more OpenTelemetry Javaagent RMI context propagation allows resource exhaustion CVE-2026-54712 Fix available 5.3 MediumJuly 1, 2026
• linuxfoundation opentelemetry instrumentation for java, open-telemetry opentelemetry-java-instrumentation +1 more OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords CVE-2026-54704 Fix available 6.5 MediumJuly 1, 2026
• linuxfoundation opentelemetry instrumentation for java, open-telemetry opentelemetry-java-instrumentation, red hat jboss enterprise application platform 8 +1 more +3 more OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution CVE-2026-33701 Public exploitFix available 9.3 CriticalMarch 25, 2026
• linuxfoundation opentelemetry instrumentation for java, open-telemetry opentelemetry-java-instrumentation +1 more Instrumentation for AWS SDK v2 captures email content when using Amazon Simple Email Service (SES) v1 API, exposing that content to the telemetry backend CVE-2023-39951 6.5 MediumAugust 8, 2023