OP
Product
opentelemetry-collector-contrib
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add opentelemetry-collector-contrib to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42602 | 8.1 | May 13 | azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay Affected: >= 0.124.0, <= 0.150.0 |
| CVE-2026-55701 | 6.9 | Sep 15 | OpenTelemetry githubreceiver silently ignores configured required_headers authentication Affected: < 0.151.0 |
| CVE-2026-47256 | 5.3 | Sep 14 | OpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token Affected: < 0.154.0 |
Showing 3