Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Tag: opentelemetry Clear
ID Title
CVE-2026-54285 Vulnerability in @opentelemetry/core (CVE-2026-54285)
vulnerability in @opentelemetry/core (CVE-2026-54285). Risk of unauthorized operations or information disclosure. Exploitable via ``baggage``. Mitigation: upgrade to `2.8.0` or later.
CVE-2026-44967 Vulnerability in c (CVE-2026-44967)
vulnerability in c (CVE-2026-44967). Risk of unauthorized operations or information disclosure.
CVE-2026-45682 Vulnerability in go.opentelemetry.io/obi (CVE-2026-45682)
vulnerability in go.opentelemetry.io/obi (CVE-2026-45682). Risk of unauthorized operations or information disclosure. Exploitable via ``CappedConcurrentHashMap``. Mitigation: upgrade to `0.9.0` or later.
CVE-2026-45683 Vulnerability in go.opentelemetry.io/obi (CVE-2026-45683)
vulnerability in go.opentelemetry.io/obi (CVE-2026-45683). Risk of unauthorized operations or information disclosure. Exploitable via ``bpf_probe_read``. Mitigation: upgrade to `0.9.0` or later.
CVE-2026-42348 Vulnerability in OpenTelemetry.OpAmp.Client (CVE-2026-42348)
vulnerability in OpenTelemetry.OpAmp.Client (CVE-2026-42348). Risk of unauthorized operations or information disclosure. Exploitable via ``ReadAsByteArrayAsync``. Mitigation: upgrade to `0.2.0-alpha.1` or later.
CVE-2026-44902 Vulnerability in @opentelemetry/exporter-prometheus (CVE-2026-44902)
vulnerability in @opentelemetry/exporter-prometheus (CVE-2026-44902). Risk of unauthorized operations or information disclosure. Exploitable via ``TypeError``. Mitigation: upgrade to `0.217.0` or later.
CVE-2026-41484 Vulnerability in OpenTelemetry.Exporter.OneCollector (CVE-2026-41484)
vulnerability in OpenTelemetry.Exporter.OneCollector (CVE-2026-41484). Risk of unauthorized operations or information disclosure. Exploitable via ``HttpJsonPostTransport``. Mitigation: upgrade to `1.15.1` or later.
CVE-2026-41483 Vulnerability in OpenTelemetry.Resources.Azure (CVE-2026-41483)
vulnerability in OpenTelemetry.Resources.Azure (CVE-2026-41483). Risk of unauthorized operations or information disclosure. Exploitable via ``OpenTelemetry.Resources.Azure``. Mitigation: upgrade to `1.15.1-beta.1` or later.
CVE-2026-41310 Vulnerability in OpenTelemetry.Exporter.Zipkin (CVE-2026-41310)
vulnerability in OpenTelemetry.Exporter.Zipkin (CVE-2026-41310). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.15.3` or later.
CVE-2026-41433 Path Traversal in go.opentelemetry.io/obi (CVE-2026-41433)
path traversal in go.opentelemetry.io/obi (CVE-2026-41433). Data can be tampered with by attackers. Exploitable via ``TMPDIR``. Mitigation: upgrade to `0.8.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →