Maven/com.splunk:splunk-otel-javaagent: critical
splunk-otel-javaagent: Unsafe deserialization in RMI instrumentation may lead to Remote Code Execution
Action: Upgrade com.splunk:splunk-otel-javaagent to 2.26.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.26.1 | - |
Fixed versions
| 2.26.1 |
Sources
- osv: GHSA-h8w2-rv57-vc6f
- https://github.com/open-telemetry/opentelemetry-java-instrumentation/security/advisories/GHSA-xw7x-h9fj-p2c7
- https://github.com/signalfx/splunk-otel-java/security/advisories/GHSA-h8w2-rv57-vc6f
- https://github.com/signalfx/splunk-otel-java
published · modified · JSON