CVE-2026-128080 | OpenTelemetry JavaScript up to 0.221.x instrumentation-http information disclosure

November 13, 2026 Yanac

A vulnerability was found in OpenTelemetry JavaScript up to 0.221.x. It has been declared as problematic. This issue affects some unknown processing of the component instrumentation-http. Executing a manipulation can lead to information disclosure.

The identification of this vulnerability is CVE-2026-128080. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More