redhat/python-opentelemetry_api vulnerabilities

Latest redhat/python-opentelemetry_api CVEs

Newest publication first

1. CVE-2026-114603 OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api

   Published 2026-10-22

   Medium·CVSS 5.3 EPSS 0.49%

   OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.1, the opentelemetry-api function TraceState.from_header in opentelemetry/trace/span.py, reached through TraceContextTextMapPropagator.extract, parses inbound W3C tracestate headers with an unbo...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.