open-telemetry/opentelemetry-js

open-telemetry/opentelemetry-js

GitHubGitHub
GitHubgithub.com
opentelemetry.ioopentelemetry.io
Releases198
Frequency1 week 5 days
Last Release
Stars3.39K
OpenTelemetry JavaScript Client
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-44902↗
7.5 HIGH—

opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTTP request crashes any Node.js process running the OpenTelemetry JS Prometheus exporter. The metrics endpoint (default 0.0.0.0:9464) has no error handling around URL parsing, so a request with an invalid URI causes an uncaught TypeError that terminates the process. This vulnerability is fixed in 0.217.0.