Opentelemetry/sdk-node vulnerabilities

1 known vulnerability in Opentelemetry/sdk-node from OpenTelemetry. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  opentelemetry-js: Improper Handling of Exceptional Conditions

  CVE-2026-44902May 27, 2026Open-telemetry

  opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTTP request crashes any Node.js process running the OpenTelemetry JS Prometheus exporter. The metrics endpoint (default 0.0.0.0:9464) has no error handling around UR