opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerability affects the baggage propagation implementation in opentelemetry-api and opentelemetry-extension-trace-propagators. Parsing oversized baggage causes unbounded memory allocation and CPU consumption. Because baggage is automatically re-injected into every outgoing request, the effect can fan out to downstream services that never received the original malicious request. This vulnerability is fixed in 1.62.0.

oracle CPUOct2026: MySQL Cluster >=9.7.0|<=9.7.4

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.38

oracle CPUOct2026: MySQL Cluster >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.50

oracle CPUOct2026: MySQL Cluster >=26.7.0|<=26.7.2

oracle CPUOct2026: MySQL Server >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Server >=26.7.0|<=26.7.2

oracle CPUOct2026: MySQL Server >=9.7.0|<=9.7.4

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK
    for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerability affects the baggage
    propagation implementation in opentelemetry-api and opentelemetry-extension-trace-propagators. Parsing
    oversized baggage causes unbounded memory allocation and CPU consumption. Because baggage is automatically
    re-injected into every outgoing request, the effect can fan out to downstream services that never received
    the original malicious request. This vulnerability is fixed in 1.62.0. (CVE-2026-45292)

ID	Name	Product	Family	Type	Severity
460797	Echo: io.opentelemetry:opentelemetry-api: security update to 1.62.0	Tenable Cloud Security	Echo Local Security Checks	Local	high
460797	Echo: io.opentelemetry:opentelemetry-api: security update to 1.62.0	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
441857	SCA: security update for io.opentelemetry:opentelemetry-api, io.opentelemetry:opentelemetry-extension-trace-propagators (GHSA-rcgg-9c38-7xpx)	Tenable Cloud Security	SCA Checks	Local	high
441857	SCA: security update for io.opentelemetry:opentelemetry-api, io.opentelemetry:opentelemetry-extension-trace-propagators (GHSA-rcgg-9c38-7xpx)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-45292

high

Tenable Plugins

Coming Soon

high

high

high

high