com.weibo:rill-flow-service (>=0.1.3, <=0.1.18) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.29.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - com.weibo:rill-flow-service =0.1.3, =0.1.18 Source cves:...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=1.2.0, <=1.3.0) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.14.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =1.2.0,...

org.hypertrace.agent:javaagent (1.2.0) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.6.2)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.hypertrace.agent:javaagent 1.2.0 Source cves:...

org.apache.inlong.agent-common.1.11.0.inlong1.11.org.apache.inlong:agent-common (1.11.0), org.apache.inlong:agent-common (>=1.9.0, <=2.4.0) +145 more potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.28.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: -...

io.github.microcks:microcks-app (>=1.11.0, <=1.12.1), io.telicent.smart-caches:cli-debug (>=0.22.0, <=0.36.2) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.6)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.github.microcks:microcks-app =1.11.0, =0.22.0, =0.36.2...

io.honeycomb:honeycomb-opentelemetry-javaagent (0.7.0) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.7.2)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 0.7.0 Source...

io.honeycomb:honeycomb-opentelemetry-javaagent (1.4.2) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.22.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 1.4.2 Sourc...

software.amazon.opentelemetry:aws-opentelemetry-agent (0.15.0-aws.1) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (0.15.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - software.amazon.opentelemetry:aws-opentelemetry-agent...

io.telicent.smart-caches:cli-debug (0.21.2) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.5)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.telicent.smart-caches:cli-debug 0.21.2 Source cves:...

OpenTelemetry Javaagent RMI context propagation allows resource exhaustion

The RMI context propagation payload reader limits the number of context entries but does not limit the aggregate size of the strings read from the stream. An attacker who can reach an RMI endpoint on an instrumented JVM can send an oversized context propagation payload. This can cause excessive...

io.telicent.smart-caches:cli-debug (>=0.20.2, <=0.21.1) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.4)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.telicent.smart-caches:cli-debug =0.20.2, =0.21.1 Source...

org.hypertrace.agent:javaagent (>=1.2.7, <=1.2.10) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.13.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.hypertrace.agent:javaagent =1.2.7, =1.2.10 Source cves...

io.honeycomb:honeycomb-opentelemetry-javaagent (1.7.0) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 1.7.0 Sourc...

org.hypertrace.agent:javaagent (1.2.2) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.10.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.hypertrace.agent:javaagent 1.2.2 Source cves:...

com.sap.hcp.cf.logging:sample-app-spring-boot (>=3.8.0, <=4.0.0-rc1) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.31.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - com.sap.hcp.cf.logging:sample-app-spring-boot =3.8.0,...

io.github.middleware-labs:agent-apm-java (>=0.0.10, <=0.0.18), io.honeycomb:honeycomb-opentelemetry-javaagent (0.4.0) +2 more potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.2.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.github.middleware-labs:agent-apm-java =0.0.10, =1.1.7,...

io.telicent.smart-caches.graph:docker (>=0.80.0, <=0.93.4), io.telicent.smart-caches.graph:scg-system (>=0.80.0, <=0.93.4) +1 more potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.telicent.smart-caches.graph:docker =0.80.0, =0.80.0,...

com.sap.hcp.cf.logging:sample-app-spring-boot (>=3.8.5, <=4.2.0), dev.vality:kotlin-service-parent-pom (>=4.0.0, <=4.0.1) +9 more potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (>=2.14.0, <=2.26.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version =2.14.0, =3.8.5, =4.0.0, =4.0.0, =4.0.0-alpha1, =0.93.5, =0.93.5, =0.36.3, =2.1.5, =2.5.12, =3.0.0-beta-2, =3.0.0-beta-2, =3.0.0 Source cves: CVE-2026-54712 Source advisory: SNYK:JAVA-IOOPENTELEMETRYJAVAAGENT-18508013...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=0.8.1, <=0.9.0) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.9.2)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =0.8.1, =0.9...

io.honeycomb:honeycomb-opentelemetry-javaagent (0.10.0), org.hypertrace.agent:javaagent (>=1.2.3, <=1.2.6) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.11.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 0.10.0 -...