ROOT-APP-MAVEN-CVE-2026-33701 CVE-2026-33701 in io.opentelemetry.javaagent:opentelemetry-javaagent - Patched by Root

Root has patched CVE-2026-33701 in the io.opentelemetry.javaagent:opentelemetry-javaagent package for Root:Maven. Multiple fixed versions available...

Elastic OTel Java 1.10.0 Security Update (ESA-2026-22 / GHSA-xw7x-h9fj-p2c7)

Dependency on Vulnerable Third-Party Component in Elastic OTel Java Leading to Remote Code Execution Dependency on Vulnerable Third-Party Component CWE-1395 exists in Elastic OTel Java via a dependency on OpenTelemetry Java instrumentation library. This vulnerability could allow an attacker to...

CVE-2026-33701

A flaw was found in OpenTelemetry Java Instrumentation. This vulnerability allows a remote attacker with network access to a Java Management Extensions JMX or Remote Method Invocation RMI port on an instrumented Java Virtual Machine JVM running Java Development Kit JDK version 16 or earlier to...

CVE-2026-33701

OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.26.1, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. On JDK version 16 and...

io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent-lettuce-5.0 (0.14.0), io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent-lettuce-5.1 (0.14.0) +3 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent (0.14.0)

io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent and may be impacted: -...

com.sap.hcp.cf.logging:sample-app-spring-boot (>=3.8.5, <=4.1.0), dev.vality:shared-resources (>=4.0.0-alpha1, <=4.0.0-alpha4) +2 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (>=2.14.0, <=2.23.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version =2.14.0, =3.8.5, =4.0.0-alpha1, =2.1.5, =2.5.12, =2.6.4-hadoop3 Source cves: CVE-2026-33701 Source advisory: GHSA-XW7X-H9FJ-P2C7...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=0.8.1, <=0.9.0) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.9.2)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =0.8.1, =0.9...

com.weibo:rill-flow-service (>=0.1.3, <=0.1.18) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.29.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - com.weibo:rill-flow-service =0.1.3, =0.1.18 Source cves:...

io.honeycomb:honeycomb-opentelemetry-javaagent (0.8.0) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.9.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 0.8.0 Source...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=0.2.1, <=0.3.0), org.apache.hbase:hbase-assembly (>=3.0.0-alpha-1, <=3.0.0-alpha-3) +2 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.0.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =0.2.1,...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=0.5.0, <=0.6.1) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.6.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =0.5.0, =0.6...

io.honeycomb:honeycomb-opentelemetry-javaagent (0.7.0) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.7.2)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 0.7.0 Source...

org.hypertrace.agent:javaagent (1.2.1) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.10.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.hypertrace.agent:javaagent 1.2.1 Source cves:...

org.hypertrace.agent:javaagent (1.2.2) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.10.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.hypertrace.agent:javaagent 1.2.2 Source cves:...

org.apache.hbase:hbase-assembly (>=2.5.0, <=3.0.0-beta-1) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.15.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.apache.hbase:hbase-assembly =2.5.0, =3.0.0-beta-1 Sour...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=1.4.0, <=1.4.1) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.19.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =1.4.0,...

io.honeycomb:honeycomb-opentelemetry-javaagent (1.4.2) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.22.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 1.4.2 Sourc...

io.honeycomb:honeycomb-opentelemetry-javaagent (1.5.0) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.25.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 1.5.0 Sourc...

io.telicent.smart-caches.graph:docker (>=0.80.0, <=0.93.4), io.telicent.smart-caches.graph:scg-system (>=0.80.0, <=0.93.4) +1 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.telicent.smart-caches.graph:docker =0.80.0, =0.80.0,...

io.telicent.smart-caches.entity-resolution:cli-canonical-index (>=0.6.2, <=0.6.4), io.telicent.smart-caches.entity-resolution:entity-resolver-api-server (>=0.6.2, <=0.6.4) +1 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.3)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: -...