io.github.middleware-labs:agent-apm-java (>=0.0.10, <=0.0.18), io.honeycomb:honeycomb-opentelemetry-javaagent (0.4.0) +2 more potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.2.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.github.middleware-labs:agent-apm-java =0.0.10, =1.1.7,...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=0.5.0, <=0.6.1) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.6.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =0.5.0, =0.6...

org.hypertrace.agent:javaagent (1.2.0) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.6.2)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.hypertrace.agent:javaagent 1.2.0 Source cves:...

io.honeycomb:honeycomb-opentelemetry-javaagent (0.7.0) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.7.2)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 0.7.0 Source...

io.honeycomb:honeycomb-opentelemetry-javaagent (0.8.0) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.9.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 0.8.0 Source...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=0.8.1, <=0.9.0) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.9.2)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =0.8.1, =0.9...

org.hypertrace.agent:javaagent (1.2.1) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.10.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.hypertrace.agent:javaagent 1.2.1 Source cves:...

org.hypertrace.agent:javaagent (1.2.2) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.10.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.hypertrace.agent:javaagent 1.2.2 Source cves:...

io.honeycomb:honeycomb-opentelemetry-javaagent (0.10.0), org.hypertrace.agent:javaagent (>=1.2.3, <=1.2.6) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.11.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 0.10.0 -...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=1.0.0, <=1.1.1) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.12.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =1.0.0,...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=1.4.0, <=1.4.1) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.19.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =1.4.0,...

io.honeycomb:honeycomb-opentelemetry-javaagent (1.4.2) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.22.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 1.4.2 Sourc...

org.hypertrace.agent:javaagent (>=1.3.0, <=1.3.11) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.24.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.hypertrace.agent:javaagent =1.3.0, =1.3.11 Source cves...

software.amazon.opentelemetry:aws-opentelemetry-agent (0.12.1-aws.1) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (0.12.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - software.amazon.opentelemetry:aws-opentelemetry-agent...

software.amazon.opentelemetry:aws-opentelemetry-agent (0.17.0-aws.1) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (0.17.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - software.amazon.opentelemetry:aws-opentelemetry-agent...

org.hypertrace.agent:javaagent (>=0.12.2, <=1.0.2) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.0.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.hypertrace.agent:javaagent =0.12.2, =1.0.2 Source cves:...

OpenTelemetry Javaagent RMI context propagation allows resource exhaustion

The RMI context propagation payload reader limits the number of context entries but does not limit the aggregate size of the strings read from the stream. An attacker who can reach an RMI endpoint on an instrumented JVM can send an oversized context propagation payload. This can cause excessive...

com.sap.hcp.cf.logging:sample-app-spring-boot (>=3.8.0, <=4.2.0), com.weibo:rill-flow-service (>=0.1.3, <=0.1.18) +164 more potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (>=0.12.1, <=2.26.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version =0.12.1, =3.8.0, =0.1.3, =4.0.0, =4.0.0, =4.0.0-alpha1, =1.9.0, =0.0.10, =0.2.1, =0.6.2, =0.6.2, =0.80.0, =0.80.0, =0.19.0, =2.1.5, =2.5.0, =3.0.0 and more Source cves: CVE-2026-54712 Source advisory: MEND:CVE-2026-54712...

com.lightstep.opentelemetry:opentelemetry-launcher (0.16.0), io.opentelemetry.javaagent:opentelemetry-javaagent-tooling (>=0.16.0, <=0.16.1) +1 more potentially affected by CVE-2026-45292 via io.opentelemetry:opentelemetry-extension-trace-propagators (0.16.0)

io.opentelemetry:opentelemetry-extension-trace-propagators MAVEN version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry:opentelemetry-extension-trace-propagators and may be impacted: -...

io.opentelemetry.javaagent:opentelemetry-javaagent-tooling (0.17.0-alpha), io.opentelemetry:opentelemetry-opencensus-shim (0.17.0-alpha) potentially affected by CVE-2026-45292 via io.opentelemetry:opentelemetry-extension-trace-propagators (0.17.0)

io.opentelemetry:opentelemetry-extension-trace-propagators MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry:opentelemetry-extension-trace-propagators and may be impacted: -...