open-telemetry opentelemetry-js

• CVE-2026-59892 High 7.5 OpenTelemetry JavaScript: Denial of service in `JaegerPropagator` via unhandled exception on a malformed header 0.6%
• CVE-2026-54285 Medium 5.3 opentelemetry-js: Unbounded memory allocation in W3C Baggage propagation 0.4%
• CVE-2026-44902 High 7.5 opentelemetry-js: Prometheus exporter process crash via malformed HTTP request 0.5%