CLEANSTART-2026-TL30808: OpenTelemetry Python provides the Python API and SDK for OpenTelemetry

Q: Does exploitation require authentication or user interaction?

No. The supplied vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

Q: What is the indicated impact if exploited?

The vector indicates a low availability impact and no indicated confidentiality or integrity impact. The listed severity is medium, with a score of 5.3.

Q: Can I determine whether a specific deployment is affected from this advisory?

The advisory identifies the cleanstart/airflow-3 package, but it does not provide affected or fixed version information. A specific deployment cannot be confirmed as affected from the supplied data alone.

Published Nov 3, 2026

Updated

Security vulnerability affects the airflow-3 package. OpenTelemetry Python provides the Python API and SDK for OpenTelemetry.

Affected Software

1 affected componentFixes available

cleanstart/airflow-3<3.3.2-r1

3.3.2-r1

Event History

Nov 3, 2026

Advisory Published

via OSV·12:42 AM

Data Sourced

via OSV·12:42 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-114603

Frequently Asked Questions

Does exploitation require authentication or user interaction?

No. The supplied vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

What is the indicated impact if exploited?

The vector indicates a low availability impact and no indicated confidentiality or integrity impact. The listed severity is medium, with a score of 5.3.

Can I determine whether a specific deployment is affected from this advisory?

The advisory identifies the cleanstart/airflow-3 package, but it does not provide affected or fixed version information. A specific deployment cannot be confirmed as affected from the supplied data alone.

CLEANSTART-2026-TL30808: OpenTelemetry Python provides the Python API and SDK for OpenTelemetry

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Does exploitation require authentication or user interaction?

What is the indicated impact if exploited?

Can I determine whether a specific deployment is affected from this advisory?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require authentication or user interaction?

What is the indicated impact if exploited?

Can I determine whether a specific deployment is affected from this advisory?