Vulnerabilities in OpenTelemetry software