com.sap.hcp.cf.logging:sample-app-spring-boot (>=3.8.0, <=4.1.0), com.weibo:rill-flow-service (>=0.1.3, <=0.1.18) +160 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (>=0.12.1, <=2.23.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version =0.12.1, =3.8.0, =0.1.3, =4.0.0-alpha1, =1.9.0, =0.0.10, =0.2.1, =0.6.2, =0.6.2, =0.80.0, =0.80.0, =0.19.0, =2.1.5, =2.5.0, =1.9.0, =2.4.0 and more Source cves: CVE-2026-33701 Source advisory: MEND:CVE-2026-33701...

com.sap.hcp.cf.logging:sample-app-spring-boot (>=3.8.5, <=4.1.0), dev.vality:shared-resources (>=4.0.0-alpha1, <=4.0.0-alpha4) +2 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (>=2.14.0, <=2.23.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version =2.14.0, =3.8.5, =4.0.0-alpha1, =2.1.5, =2.5.12, =2.6.4-hadoop3 Source cves: CVE-2026-33701 Source advisory: SNYK:JAVA-IOOPENTELEMETRYJAVAAGENT-15857172...

io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent-lettuce-5.0 (0.14.0), io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent-lettuce-5.1 (0.14.0) +3 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent (0.14.0)

io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent and may be impacted: -...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the RMI integration. An attacker can execute arbitrary code with the privileges of the user running the instrumented JVM by sending specially crafted serialized data to a network-exposed JMX or RMI...

PT-2026-28514

Name of the Vulnerable Software and Affected Versions dd-trace-java versions 0.40.0 through prior to 1.60.2 Description dd-trace-java is a Datadog APM client for Java. The RMI instrumentation in affected versions registered a custom endpoint that deserialized incoming data without applying...

io.honeycomb:honeycomb-opentelemetry-javaagent (1.5.0) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.25.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 1.5.0 Sourc...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=1.5.2, <=1.6.0) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.27.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =1.5.2,...

org.apache.inlong.agent-common.1.11.0.inlong1.11.org.apache.inlong:agent-common (1.11.0), org.apache.inlong:agent-common (>=1.9.0, <=2.4.0) +145 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.28.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: -...

io.github.microcks:microcks-app (>=1.9.0, <=1.10.1-fix-1), io.telicent.smart-caches.graph:docker (0.80.1) +1 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.32.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.github.microcks:microcks-app =1.9.0, =1.10.1-fix-1 -...

io.telicent.smart-caches.entity-resolution:cli-canonical-index (>=0.6.2, <=0.6.4), io.telicent.smart-caches.entity-resolution:entity-resolver-api-server (>=0.6.2, <=0.6.4) +1 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.3)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: -...

io.telicent.smart-caches:cli-debug (>=0.20.2, <=0.21.1) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.4)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.telicent.smart-caches:cli-debug =0.20.2, =0.21.1 Source...

io.telicent.smart-caches:cli-debug (0.21.2) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.5)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.telicent.smart-caches:cli-debug 0.21.2 Source cves:...

io.github.microcks:microcks-app (>=1.11.0, <=1.12.1), io.telicent.smart-caches:cli-debug (>=0.22.0, <=0.36.2) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.6)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.github.microcks:microcks-app =1.11.0, =0.22.0, =0.36.2...

com.sap.hcp.cf.logging:sample-app-spring-boot (>=3.8.5, <=4.1.0), dev.vality:shared-resources (>=4.0.0-alpha1, <=4.0.0-alpha4) +2 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (>=2.14.0, <=2.23.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version =2.14.0, =3.8.5, =4.0.0-alpha1, =2.1.5, =2.5.12, =2.6.4-hadoop3 Source cves: CVE-2026-33701 Source advisory: GHSA-XW7X-H9FJ-P2C7...

com.weibo:rill-flow-service (>=0.1.3, <=0.1.18) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.29.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - com.weibo:rill-flow-service =0.1.3, =0.1.18 Source cves:...

com.sap.hcp.cf.logging:sample-app-spring-boot (>=3.8.0, <=4.0.0-rc1) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.31.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - com.sap.hcp.cf.logging:sample-app-spring-boot =3.8.0,...

io.telicent.smart-caches.graph:docker (>=0.80.0, <=0.93.4), io.telicent.smart-caches.graph:scg-system (>=0.80.0, <=0.93.4) +1 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.telicent.smart-caches.graph:docker =0.80.0, =0.80.0,...

io.honeycomb:honeycomb-opentelemetry-javaagent (1.7.0) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 1.7.0 Sourc...

com.sap.hcp.cf.logging:sample-app-spring-boot (>=3.8.5, <=4.1.0), dev.vality:shared-resources (>=4.0.0-alpha1, <=4.0.0-alpha4) +2 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (>=2.14.0, <=2.23.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version =2.14.0, =3.8.5, =4.0.0-alpha1, =2.1.5, =2.5.12, =2.6.4-hadoop3 Source cves: CVE-2026-33701 Source advisory: OSV:GHSA-XW7X-H9FJ-P2C7...

software.amazon.opentelemetry:aws-opentelemetry-agent (0.12.1-aws.1) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (0.12.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - software.amazon.opentelemetry:aws-opentelemetry-agent...