Vulnerability index

Browse CVEs

31 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Opentelemetry MEDIUM 5.3
CVE-2026-44967

OpenTelemetry-cpp is the C++ implementation of OpenTelemetry. Prior to release 1.27.0, the OTLP HTTP exporters (traces/metrics/logs) read the full HT…

Fix: 1.27.0+
Fix from $1,600 2026-06-12
Telemetry Schema Files MEDIUM 5.5
CVE-2026-45287

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17, `go.opentelemetry.io/otel/schema/v1.0` and `go.opentelemetry.io/…

Fix: 0.0.17+
Fix from $1,600 2026-06-04
Opentelemetry MEDIUM 5.3
CVE-2026-41178

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process …

Fix: 1.42.0+
Fix from $1,600 2026-06-04
Ebpf Instrumentation HIGH 7.5
CVE-2026-45685

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.1.0 to before version 0.9.0, mal…

Fix: 0.9.0+
Fix from $1,950 2026-06-02
Ebpf Instrumentation HIGH 7.5
CVE-2026-45686

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, a r…

Fix: 0.9.0+
Fix from $1,950 2026-06-02
Ebpf Instrumentation MEDIUM 5.3
CVE-2026-45684

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, OBI…

Fix: 0.9.0+
Fix from $1,600 2026-06-02
Ebpf Instrumentation HIGH 7.5
CVE-2026-45678

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol p…

Fix: 0.9.0+
Fix from $1,950 2026-06-02
Ebpf Instrumentation HIGH 7.5
CVE-2026-45680

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI replays BPF probe h…

Fix: 0.9.0+
Fix from $1,950 2026-06-02
Ebpf Instrumentation MEDIUM 6.5
CVE-2026-45679

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI exports raw Redis e…

Fix: 0.9.0+
Fix from $1,600 2026-06-02
Ebpf Instrumentation MEDIUM 5.9
CVE-2026-45681

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the per-CPU message-buf…

Fix: 0.9.0+
Fix from $1,600 2026-06-02
Ebpf Instrumentation MEDIUM 5.5
CVE-2026-45676

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI's replacement ELF p…

Fix: 0.9.0+
Fix from $1,600 2026-06-02
Ebpf Instrumentation MEDIUM 5.5
CVE-2026-45682

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the custom CappedConcur…

Fix: 0.9.0+
Fix from $1,600 2026-06-02
Opentelemetry Collector Contrib HIGH 8.1
CVE-2026-42602

azureauthextension is the Azure Authenticator Extension. From 0.124.0 to 0.150.0, a server-side authentication bypass in azureauthextension allows an…

Fix: after 0.150.0
Fix from $1,950 2026-05-13
Opentelemetry.exporter.opentelemetryprotocol HIGH 7.8
CVE-2026-42191

OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP (OpenTelemetry Protocol) exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry …

Fix: 1.15.3+
Fix from $1,950 2026-05-12
Opentelemetry.opamp.client HIGH 7.5
CVE-2026-42348

OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HT…

Fix: 0.2.0+
Fix from $1,950 2026-05-12
Opentelemetry.exporter.onecollector MEDIUM 5.9
CVE-2026-41484

OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP. In versions 1.15.0 and earlier, whe…

Fix: after 1.15.0
Fix from $1,600 2026-05-06
Opentelemetry.resources.azure MEDIUM 5.9
CVE-2026-41483

OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments. In versions 1.15.0-beta.1 and earlier, the AzureVmMetaDataRequest…

Fix: after 1.15.0
Fix from $1,600 2026-05-06
Opentelemetry.exporter.zipkin MEDIUM 5.3
CVE-2026-41310

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cach…

Fix: 1.15.3+
Fix from $1,600 2026-05-06
Opentelemetry Ebpf Instrumentation HIGH 8.4
CVE-2026-41433

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From 0.4.0 to before 0.8.0, a flaw in the Java …

Fix: 0.8.0+
Fix from $1,950 2026-04-24
Opentelemetry MEDIUM 5.9
CVE-2026-41078

OpenTelemetry dotnet is a dotnet telemetry framework. In 1.6.0-rc.1 and earlier, OpenTelemetry.Exporter.Jaeger may allow sustained memory pressure wh…

Fix: 1.6.0+
Fix from $1,600 2026-04-23
Opentelemetry MEDIUM 5.3
CVE-2026-40894

OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1…

Fix: 1.15.3+
Fix from $1,600 2026-04-23
Opentelemetry MEDIUM 5.9
CVE-2026-40182

OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry to a back-end/collector over gRPC or HTT…

Fix: 1.15.2+
Fix from $1,600 2026-04-23
Opentelemetry MEDIUM 5.3
CVE-2026-40891

OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protoc…

Fix: 1.15.3+
Fix from $1,600 2026-04-23
Opentelemetry HIGH 7.0
CVE-2026-39883

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed the Darwin ioreg command to use…

Fix: 1.43.0+
Fix from $1,950 2026-04-08
Opentelemetry MEDIUM 5.3
CVE-2026-39882

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) read the full HTTP respons…

Fix: 1.43.0+
Fix from $1,600 2026-04-08
Opentelemetry HIGH 7.5
CVE-2026-29181

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage: header extraction parses each header field-va…

Fix: 1.41.0+
Fix from $1,950 2026-04-07
Opentelemetry HIGH 7.0
CVE-2026-24051

OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking (Untru…

Fix: 1.40.0+
Fix from $1,950 2026-02-02
Configgrpc HIGH 7.5
CVE-2024-36129

The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process and export telemetry data. An unsafe decompression vul…

Fix: 0.102.0 / 0.102.1+
Fix from $1,950 2024-06-05
Opentelemetry HIGH 7.5
CVE-2023-47108

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the gr…

Fix: 0.46.0+
Fix from $1,950 2023-11-10
Opentelemetry HIGH 7.5
CVE-2023-45142

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. A handler wrapper out of the box adds labels `http.user_agent`…

Fix: 0.44.0+
Fix from $1,950 2023-10-12