@opentelemetry/core
3.0.0 · 20 Oct 2026Apache-2.089.1M / weekRepositoryHomepagenpmAtom feed
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
Is your project affected?
Paste your package.json, or type the range you declare for @opentelemetry/core. It is read in your browser and sent nowhere.
| Line | Newest | Where it stands |
|---|---|---|
| 3.0.0 | No known advisory | |
| 2.12.0 | Safe from 2.8.0 | |
| 1.30.1 | 27 open advisories, worst moderate · last release Jan 2025, no longer updated |
- ModerateOpenTelemetry Core: Unbounded memory allocation in W3C Baggage propagationGHSA-8988-4f7v-96qf · 15 Jun 2026
- 2.x2.0.0 – 2.7.1Fixed in 2.8.0
- 1.x and older0.1.0 – 1.30.1No fix, no longer updated · move to 2.8.0
Registry facts last checked 22 Oct 2026. Releases and advisories last read 22 Oct 2026.