https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:11:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-332204 EUVD-2026-332204 https://cve.radiocsirt.org/vuln/euvd-2026-332204 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54704 <p>OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.28.0, the JDBC auto-instrumentation may fail to sanitize passwords in SQL CONNECT statements when the password is double-quoted. As a result, clear-text database passwords can be added to trace span attributes and exported to observability backends. This issue has been fixed in version 2.28.0.</p> <p>OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.28.0, the JDBC auto-instrumentation may fail to sanitize passwords in SQL CONNECT statements when the password is double-quoted. As a result, clear-text database passwords can be added to trace span attributes and exported to observability backends. This issue has been fixed in version 2.28.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-54704 https://cve.radiocsirt.org/vuln/ghsa-rwqx-fvqh-6wm4 <p><strong>Affected:</strong> Maven: io.opentelemetry.javaagent:opentelemetry-javaagent</p> <p>OpenTelemetry Java Instrumentation JDBC auto-instrumentation may fail to sanitize passwords in SQL CONNECT statements when the password is double-quoted. As a result, clear-text database passwords can be added to trace span attributes and exported to observability backends.</p> <p><strong>Affected:</strong> Maven: io.opentelemetry.javaagent:opentelemetry-javaagent</p> <p>OpenTelemetry Java Instrumentation JDBC auto-instrumentation may fail to sanitize passwords in SQL CONNECT statements when the password is double-quoted. As a result, clear-text database passwords can be added to trace span attributes and exported to observability backends.</p> https://cve.radiocsirt.org/vuln/ghsa-rwqx-fvqh-6wm4