CVE-2026-118259 — opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing

The CIRCL Vulnerability-Lookup entry describes a vulnerability in opentelemetry-java that causes quadratic CPU consumption when parsing W3C tracestate.