Mmastodon TechnologyCybersecurity first seen 21 h ago, last 21 h ago, peak #4

OpenTelemetry JavaScript instrumentation libraries flagged in new vulnerability advisory

Original: 🚨 EUVD-2026-91788 📊 Score: 5.8/10 (CVSS v3.1) 📦 Product: instrumentation-cassandra-driver, instrumentation-pg, instrumen

A medium-severity vulnerability, EUVD-2026-91788, has been catalogued affecting several OpenTelemetry JavaScript Contrib instrumentation packages, including instrumentation-cassandra-driver, instrumentation-pg and instrumentation-tedious. The flaw carries a CVSS v3.1 score of 5.8 out of 10 and was updated on 2 October 2026. Security teams monitoring dependencies in Node.js applications are likely reviewing whether their projects use the affected OpenTelemetry packages.

Why now: New vulnerability disclosures in widely used open-source observability packages prompt developers and security teams to assess patching needs.

OpenTelemetryEUVD-2026-91788instrumentation-cassandra-driverinstrumentation-pginstrumentation-tedious

Open on mastodon →

Evidence

• 🚨 EUVD-2026-91788 📊 Score: 5.8/10 (CVSS v3.1) 📦 Product: instrumentation-cassandra-driver, instrumentation-pg, instrumentation-tedious (+6 more) 🏢 Vendor: open-telemetry, @opentelemetry 📅 Updated: 2026-10-02 📝 OpenTelemetry JavaScript Contrib provides instrumentation libraries… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/778553