OP
Product
opentelemetry-dotnet
6
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 5Low 0
Watch
Add opentelemetry-dotnet to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42191 | 7.8 | May 12 | OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter Affected: >= 1.8.0, < 1.15.3 |
| CVE-2026-41078 | 5.9 | Apr 23 | OpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path Affected: <= 1.6.0-rc.1 |
| CVE-2026-40182 | 5.9 | Apr 23 | OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies Affected: >= 1.13.1, < 1.15.2 |
| CVE-2026-41310 | 5.3 | May 6 | OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth Affected: <= 1.15.2 |
| CVE-2026-40894 | 5.3 | Apr 23 | OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers Affected: >= 0.5.0-beta.2, < 1.15.3 |
| CVE-2026-40891 | 5.3 | Apr 23 | OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling Affected: >= 1.13.1, < 1.15.3 |
Showing 6