Browse CVEs

MEDIUM 5.3 CVE-2026-44967 OpenTelemetry-cpp is the C++ implementation of OpenTelemetry. Prior to release 1.27.0, the OTLP HTTP exporters (traces/metrics/logs) read the full HT… Opentelemetry 1.27.0+ Fix from $1,6002026-06-12 MEDIUM 5.5 CVE-2026-45287 OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17, `go.opentelemetry.io/otel/schema/v1.0` and `go.opentelemetry.io/… Telemetry Schema Files 0.0.17+ Fix from $1,6002026-06-04 MEDIUM 5.3 CVE-2026-41178 OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process … Opentelemetry 1.42.0+ Fix from $1,6002026-06-04 HIGH 7.5 CVE-2026-45685 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.1.0 to before version 0.9.0, mal… Ebpf Instrumentation 0.9.0+ Fix from $1,9502026-06-02 HIGH 7.5 CVE-2026-45686 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, a r… Ebpf Instrumentation 0.9.0+ Fix from $1,9502026-06-02 MEDIUM 5.3 CVE-2026-45684 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, OBI… Ebpf Instrumentation 0.9.0+ Fix from $1,6002026-06-02 HIGH 7.5 CVE-2026-45678 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol p… Ebpf Instrumentation 0.9.0+ Fix from $1,9502026-06-02 HIGH 7.5 CVE-2026-45680 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI replays BPF probe h… Ebpf Instrumentation 0.9.0+ Fix from $1,9502026-06-02 MEDIUM 6.5 CVE-2026-45679 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI exports raw Redis e… Ebpf Instrumentation 0.9.0+ Fix from $1,6002026-06-02 MEDIUM 5.9 CVE-2026-45681 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the per-CPU message-buf… Ebpf Instrumentation 0.9.0+ Fix from $1,6002026-06-02 MEDIUM 5.5 CVE-2026-45676 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI's replacement ELF p… Ebpf Instrumentation 0.9.0+ Fix from $1,6002026-06-02 MEDIUM 5.5 CVE-2026-45682 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the custom CappedConcur… Ebpf Instrumentation 0.9.0+ Fix from $1,6002026-06-02 HIGH 8.1 CVE-2026-42602 azureauthextension is the Azure Authenticator Extension. From 0.124.0 to 0.150.0, a server-side authentication bypass in azureauthextension allows an… Opentelemetry Collector Contrib after 0.150.0 Fix from $1,9502026-05-13 HIGH 7.8 CVE-2026-42191 OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP (OpenTelemetry Protocol) exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry … Opentelemetry.exporter.opentelemetryprotocol 1.15.3+ Fix from $1,9502026-05-12 HIGH 7.5 CVE-2026-42348 OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HT… Opentelemetry.opamp.client 0.2.0+ Fix from $1,9502026-05-12 MEDIUM 5.9 CVE-2026-41484 OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP. In versions 1.15.0 and earlier, whe… Opentelemetry.exporter.onecollector after 1.15.0 Fix from $1,6002026-05-06 MEDIUM 5.9 CVE-2026-41483 OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments. In versions 1.15.0-beta.1 and earlier, the AzureVmMetaDataRequest… Opentelemetry.resources.azure after 1.15.0 Fix from $1,6002026-05-06 MEDIUM 5.3 CVE-2026-41310 OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cach… Opentelemetry.exporter.zipkin 1.15.3+ Fix from $1,6002026-05-06 HIGH 8.4 CVE-2026-41433 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From 0.4.0 to before 0.8.0, a flaw in the Java … Opentelemetry Ebpf Instrumentation 0.8.0+ Fix from $1,9502026-04-24 MEDIUM 5.9 CVE-2026-41078 OpenTelemetry dotnet is a dotnet telemetry framework. In 1.6.0-rc.1 and earlier, OpenTelemetry.Exporter.Jaeger may allow sustained memory pressure wh… Opentelemetry 1.6.0+ Fix from $1,6002026-04-23 MEDIUM 5.3 CVE-2026-40894 OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1… Opentelemetry 1.15.3+ Fix from $1,6002026-04-23 MEDIUM 5.9 CVE-2026-40182 OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry to a back-end/collector over gRPC or HTT… Opentelemetry 1.15.2+ Fix from $1,6002026-04-23 MEDIUM 5.3 CVE-2026-40891 OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protoc… Opentelemetry 1.15.3+ Fix from $1,6002026-04-23 HIGH 7.0 CVE-2026-39883 OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed the Darwin ioreg command to use… Opentelemetry 1.43.0+ Fix from $1,9502026-04-08 MEDIUM 5.3 CVE-2026-39882 OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) read the full HTTP respons… Opentelemetry 1.43.0+ Fix from $1,6002026-04-08 HIGH 7.5 CVE-2026-29181 OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage: header extraction parses each header field-va… Opentelemetry 1.41.0+ Fix from $1,9502026-04-07 HIGH 7.0 CVE-2026-24051 OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking (Untru… Opentelemetry 1.40.0+ Fix from $1,9502026-02-02 HIGH 7.5 CVE-2024-36129 The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process and export telemetry data. An unsafe decompression vul… Configgrpc 0.102.0 / 0.102.1+ Fix from $1,9502024-06-05 HIGH 7.5 CVE-2023-47108 OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the gr… Opentelemetry 0.46.0+ Fix from $1,9502023-11-10 HIGH 7.5 CVE-2023-45142 OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. A handler wrapper out of the box adds labels `http.user_agent`… Opentelemetry 0.44.0+ Fix from $1,9502023-10-12