Latest vulnerabilities for vendor "opentelemetry"

Where

Sort:

Software

opentelemetry ebpf instrumentation go

opentelemetry opentelemetry go

opentelemetry opentelemetry .net

opentelemetry opentelemetry java instrumentation

opentelemetry opentelemetry-go

opentelemetry

opentelemetry api

opentelemetry contrib-test-utils

opentelemetry javaagent rmi context propagation

opentelemetry opentelemetry c\+\+

opentelemetry opentelemetry collector contrib go

opentelemetry opentelemetry ebpf instrumentation

opentelemetry opentelemetry ebpf instrumentation go

opentelemetry opentelemetry javascript

opentelemetry opentelemetry-cpp

opentelemetry opentelemetry-java

opentelemetry opentelemetry.api .net

opentelemetry opentelemetry.exporter.onecollector .net

opentelemetry opentelemetry.exporter.opentelemetryprotocol .net

opentelemetry opentelemetry.exporter.zipkin .net

opentelemetry opentelemetry.extensions.propagators

opentelemetry opentelemetry.opamp.client .net

opentelemetry opentelemetry.resources.azure .net

opentelemetry telemetry schema files go

OpenTelemetry OpenTelemetry JavaScriptOpenTelemetry JavaScript: Denial of service in `JaegerPropagator` via unhandled exception on a malformed header

Risk 43

Severity

7.5

First published (updated )

CVE-2026-59892

OpenTelemetry OpenTelemetry Java InstrumentationOpenTelemetry Javaagent RMI context propagation allows resource exhaustion

Risk 43

Severity

7.5

First published (updated )

CVE-2026-54712

OpenTelemetry OpenTelemetry Java InstrumentationOpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords

Risk 38

Severity

6.5

First published (updated )

CVE-2026-54704

OpenTelemetry opentelemetry-cppopentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response

Risk 32

Severity

5.3

First published (updated )

CVE-2026-44967

go/go.opentelemetry.io/otel/schema/v1.0OpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parse

Risk 32

Severity

2.1

First published (updated )

CVE-2026-45287

go/go.opentelemetry.io/otel/propagationOpenTelemetry-Go's baggage parsing no longer caps raw header length

Risk 27

Severity

5.3

First published (updated )

CVE-2026-41178

OpenTelemetry opentelemetry-javaopentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and …

Risk 33

Severity

First published (updated )

REDHAT-BUG-2482785

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI

Risk 43

Severity

7.5

First published (updated )

CVE-2026-45686

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages

Risk 43

Severity

7.5

First published (updated )

CVE-2026-45685

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers

Risk 39

Severity

5.3

First published (updated )

CVE-2026-45684

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals

Risk 32

Severity

5.5

First published (updated )

CVE-2026-45682

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure

Risk 20

Severity

3.8

First published (updated )

CVE-2026-45683

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size

Risk 35

Severity

5.9

First published (updated )

CVE-2026-45681

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU

Risk 43

Severity

7.5

First published (updated )

CVE-2026-45680

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads

Risk 43

Severity

7.5

First published (updated )

CVE-2026-45678

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages

Risk 40

Severity

6.5

First published (updated )

CVE-2026-45679

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent

Risk 32

Severity

5.5

First published (updated )

CVE-2026-45676

go/github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextensionazureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay

Risk 60

Severity

8.1

First published (updated )

CVE-2026-42602

nuget/OpenTelemetry.OpAmp.ClientOpAMP client reads unbounded HTTP response bodies

Risk 43

Severity

7.5

First published (updated )

CVE-2026-42348

nuget/OpenTelemetry.Exporter.OpenTelemetryProtocolOpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter

Risk 69

Severity

7.8

First published (updated )

CVE-2026-42191

nuget/OpenTelemetry.Exporter.OneCollectorOpenTelemetry.Exporter.OneCollector vulnerable to denial of service via unbounded HTTP error response body

Risk 35

Severity

5.9

First published (updated )

CVE-2026-41484

nuget/OpenTelemetry.Resources.AzureUnbounded HTTP response body read in OpenTelemetry.Resources.Azure

Risk 35

Severity

5.9

First published (updated )

CVE-2026-41483

nuget/OpenTelemetry.Exporter.ZipkinOpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth

Risk 27

Severity

5.3

First published (updated )

CVE-2026-41310

OpenTelemetry OpenTelemetry eBPF InstrumentationOpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR

Risk 59

Severity

8.4

First published (updated )

CVE-2026-41433

nuget/OpenTelemetry.ApiOpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers

Risk 27

Severity

5.3

First published (updated )

CVE-2026-40894

nuget/OpenTelemetryOpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling

Risk 32

Severity

5.3

First published (updated )

CVE-2026-40891

OpenTelemetry OpenTelemetry .NETOpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies

Risk 35

Severity

5.9

First published (updated )

CVE-2026-40182

OpenTelemetry OpenTelemetry .NETOpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path

Risk 35

Severity

5.9

First published (updated )

CVE-2026-41078

OpenTelemetry OpenTelemetry-GoOpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters…

Risk 33

Severity

First published (updated )

REDHAT-BUG-2456727

OpenTelemetry OpenTelemetry-GoOpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2…

Risk 33

Severity

First published (updated )

REDHAT-BUG-2456718

Trending

Vendor Risk Score

Software

OpenTelemetry OpenTelemetry JavaScriptOpenTelemetry JavaScript: Denial of service in `JaegerPropagator` via unhandled exception on a malformed header

OpenTelemetry OpenTelemetry Java InstrumentationOpenTelemetry Javaagent RMI context propagation allows resource exhaustion

OpenTelemetry OpenTelemetry Java InstrumentationOpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords

OpenTelemetry opentelemetry-cppopentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response

go/go.opentelemetry.io/otel/schema/v1.0OpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parse

Don't miss critical vulnerabilities

go/go.opentelemetry.io/otel/propagationOpenTelemetry-Go's baggage parsing no longer caps raw header length

OpenTelemetry opentelemetry-javaopentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and …

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers

Don't miss critical vulnerabilities

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads

Don't miss critical vulnerabilities

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages

go/go.opentelemetry.io/obiOpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent

go/github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextensionazureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay

nuget/OpenTelemetry.OpAmp.ClientOpAMP client reads unbounded HTTP response bodies

nuget/OpenTelemetry.Exporter.OpenTelemetryProtocolOpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter

Don't miss critical vulnerabilities

nuget/OpenTelemetry.Exporter.OneCollectorOpenTelemetry.Exporter.OneCollector vulnerable to denial of service via unbounded HTTP error response body

nuget/OpenTelemetry.Resources.AzureUnbounded HTTP response body read in OpenTelemetry.Resources.Azure

nuget/OpenTelemetry.Exporter.ZipkinOpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth

OpenTelemetry OpenTelemetry eBPF InstrumentationOpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR

nuget/OpenTelemetry.ApiOpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers

Don't miss critical vulnerabilities

nuget/OpenTelemetryOpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling

OpenTelemetry OpenTelemetry .NETOpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies

OpenTelemetry OpenTelemetry .NETOpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path

OpenTelemetry OpenTelemetry-GoOpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters…

OpenTelemetry OpenTelemetry-GoOpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2…

Don't miss critical vulnerabilities

Company

Resources

Contact