CVE-2026-114603
MediumAdvisory
Published 22 Oct 2026In the index since 23 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 130
- of 18,232 indexed, latest versions
- Container images
- 149
- deployed by those charts
- Fix available
- 1 of 1
- affected package
OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api
Carried by container images the latest versions of 130 of 18,232 indexed charts deploy, on 149 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opentelemetry-apipypi | 1.11.1, 1.12.0rc2, 1.18.0, 1.20.0+24 more | 1.45.1 | 149 |
- OSV records
- GHSA-xcq7-p3pf-p88h
Charts affected
130 by stars
Container images carrying it
149 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| langgenius/ | 066035f93856 | opentelemetry-api | 1.45.1 | 1 |
| langgenius/ | 52be6088dd84 | opentelemetry-api | 1.45.1 | 1 |
| langgenius/ | fca918260dd6 | opentelemetry-api | 1.45.1 | 1 |
| litellm/ | 09b217802ded | opentelemetry-api | 1.45.1 | 1 |
| loeken/ | b1dff5b4c593 | opentelemetry-api | 1.45.1 | 1 |
| makeplane/ | 9f650887385e | opentelemetry-api | 1.45.1 | 1 |
| makeplane/ | 71b7252adef0 | opentelemetry-api | 1.45.1 | 1 |
| maponyacharles/ | 42d418654ebd | opentelemetry-api | 1.45.1 | 1 |
| maponyacharles/ | 7b37b092130a | opentelemetry-api | 1.45.1 | 1 |
| memgraph/ | ecdf7faea3f7 | opentelemetry-api | 1.45.1 | 1 |
| mindsdb/ | 163011c09299 | opentelemetry-api | 1.45.1 | 1 |
| nousresearch/ | e0df6adebddf | opentelemetry-api | 1.45.1 | 1 |
| nousresearch/ | fca358f12efd | opentelemetry-api | 1.45.1 | 1 |
| onyxdotapp/ | f76bfd1f3c18 | opentelemetry-api | 1.45.1 | 1 |
| opea/ | 25dd26d9cd09 | opentelemetry-api | 1.45.1 | 1 |
| opea/ | 38c51b791efa | opentelemetry-api | 1.45.1 | 1 |
| opea/ | 58f91683892d | opentelemetry-api | 1.45.1 | 1 |
| opea/ | e2436483b73d | opentelemetry-api | 1.45.1 | 1 |
| opea/ | 3eaa91849512 | opentelemetry-api | 1.45.1 | 1 |
| opea/ | 262c6048aab8 | opentelemetry-api | 1.45.1 | 1 |
| opea/ | f68bec6a1271 | opentelemetry-api | 1.45.1 | 1 |
| opea/ | 02f9e8fa5d71 | opentelemetry-api | 1.45.1 | 1 |
| opea/ | 249afad3d268 | opentelemetry-api | 1.45.1 | 1 |
| opea/ | 257ae94709e9 | opentelemetry-api | 1.45.1 | 1 |
| opea/ | fe08165d7770 | opentelemetry-api | 1.45.1 | 1 |
| opencsghq/ | 41cba9c366f1 | opentelemetry-api | 1.45.1 | 1 |
| opencsghq/ | 7d0271e26521 | opentelemetry-api | 1.45.1 | 1 |
| opencti/ | 8f85a05cfc18 | opentelemetry-api | 1.45.1 | 1 |
| opencti/ | 58dacac93167 | opentelemetry-api | 1.45.1 | 1 |
| openmined/ | b72f74a68b32 | opentelemetry-api | 1.45.1 | 1 |
| prefecthq/ | e5f851d68db9 | opentelemetry-api | 1.45.1 | 1 |
| prefecthq/ | 6e0e79cabdc2 | opentelemetry-api | 1.45.1 | 1 |
| prowlercloud/ | 4f252d579be2 | opentelemetry-api | 1.45.1 | 1 |
| psono/ | 3b974b43ea03 | opentelemetry-api | 1.45.1 | 1 |
| rommapp/ | 3512f2ca4557 | opentelemetry-api | 1.45.1 | 1 |
| rommapp/ | b909e95d1aab | opentelemetry-api | 1.45.1 | 1 |
| signalen/ | 26bb090bc4e4 | opentelemetry-api | 1.45.1 | 1 |
| tock/ | 36fdf931ca00 | opentelemetry-api | 1.45.1 | 1 |
| toniblyx/ | 9dbcc3c9abd7 | opentelemetry-api | 1.45.1 | 1 |
| upstreamyard/ | 9f673183cfc0 | opentelemetry-api | 1.45.1 | 1 |
| yetiplatform/ | 8673609841e3 | opentelemetry-api | 1.45.1 | 1 |
| yetiplatform/ | 9bcbe2650a14 | opentelemetry-api | 1.45.1 | 1 |
| zenmldocker/ | d0e11680b5b4 | opentelemetry-api | 1.45.1 | 1 |
| zenmldocker/ | 6a03880ace49 | opentelemetry-api | 1.45.1 | 1 |
| ghcr.io/ | 431abcce7c1e | opentelemetry-api | 1.45.1 | 1 |
| ghcr.io/ | ab63d26a8a2c | opentelemetry-api | 1.45.1 | 1 |
| ghcr.io/ | 8d943799621b | opentelemetry-api | 1.45.1 | 1 |
| ghcr.io/ | 7629b6bb18b3 | opentelemetry-api | 1.45.1 | 1 |
| ghcr.io/ | 988cc5e4a600 | opentelemetry-api | 1.45.1 | 1 |
| ghcr.io/ | 28f706597c2f | opentelemetry-api | 1.45.1 | 1 |