p PatchFirst

PatchFirst · Latest vulnerabilities

@opentelemetry/sdk-node vulnerabilities

Vulnerabilities published for @opentelemetry/sdk-node in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-44902

    High · CVSS 7.5EPSS 0.47%Fix available

    opentelemetry-js: Prometheus exporter process crash via malformed HTTP request

    opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTTP request crashes any Node.js process running the OpenTelemetry JS Prometheus exporter. The metrics endpoint (default 0.0.0.0:9464) has no error handling around URL parsing, so a request with an invalid URI causes an uncaught TypeError that terminates the process. This vulnerability is fixed in 0.217.0.

    @opentelemetry/sdk-nodeNode.js
    • Update to 0.217.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →