CVE-2026-128080

The @opentelemetry/instrumentation-http component within the OpenTelemetry JavaScript client (versions 0.204.0 through 0.222.0 ) is vulnerable to the exposure of sensitive information. The root cause is that the library writes raw query strings from incoming HTTP requests to the url.query server-...