CLEANSTART-2026-OR75587: opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API
Security vulnerability affects the elasticsearch package. opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/elasticsearchto a version that resolves this vulnerability.Fixed in 9.5.5-r5
Frequently Asked Questions
What does the supplied severity vector indicate about exploitation and impact?
The vector indicates network-based exploitation with low attack complexity, requiring no privileges or user interaction. It indicates a low availability impact and no stated confidentiality or integrity impact.
Which component should be prioritized for inventory and review?
The record identifies the affected software as cleanstart/elasticsearch and states that the elasticsearch package is affected. Although the title and description reference opentelemetry-java, the supplied data does not clarify the relationship between it and the affected package.
Does the record identify affected versions or a workaround?
No affected version range, fixed version, configuration condition, or workaround is provided in the supplied data.