CLEANSTART-2026-CF16823: opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API
Published Nov 12, 2026
·Updated
Security vulnerability affects the sonarqube package. opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API.
Affected Software
1 affected componentFixes available
cleanstart/sonarqube<26.10.0.133078-r1
26.10.0.133078-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.10.0.133078-r1
Event History
Nov 12, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The supplied vector indicates network access is sufficient. It does not require prior privileges or user interaction, and the attack complexity is rated low.
2
What is the expected security impact?
The listed impact is limited to low availability impact. No confidentiality or integrity impact is indicated by the supplied vector.