opentelemetry-javaagent
OpenTelemetry Javaagent
92%
Total Score
healthy
Healthy release with strong ongoing maintenance and an active organization-backed project.
Health Score Breakdown
The audit covered 30 of 65 workflows, so coverage is incomplete; four workflows grant top-level write permissions. The two high-severity cache-poisoning findings are explicitly low-confidence and therefore remain hygiene concerns rather than strong evidence of risk, while all 246 analyzed action references are pinned and no untrusted checkout or script injection was found.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-54704 io.opentelemetry.javaagent:opentelemetry-javaagent is vulnerable to Insertion of Sensitive Information into Log File in versions 0.0.0 - 2.28.0-alpha. | 0.0.0 - 2.28.0-alpha | Medium |
CVE-2026-54712 io.opentelemetry.javaagent:opentelemetry-javaagent is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 2.27.0. | 0.0.0 - 2.27.0 | Medium |
CVE-2026-33701 io.opentelemetry.javaagent:opentelemetry-javaagent is vulnerable to Deserialization of Untrusted Data in versions 0.0.0 - 2.26.1. | 0.0.0 - 2.26.1 | Critical |
AIKIDO-2024-10561 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. opentelemetry-javaagent is vulnerable to Improper Resource Shutdown or Release in versions 1.3.0 - 2.10.0. | 1.3.0 - 2.10.0 | Low |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 10 days ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.