OP
Product
opentelemetry-dotnet-contrib
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 4Low 0
Watch
Add opentelemetry-dotnet-contrib to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42348 | 7.5 | May 12 | OpAMP client reads unbounded HTTP response bodies Affected: < 0.2.0-alpha.1 |
| CVE-2026-81192 | 7.0 | Sep 8 | OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS Affected: < 1.16.0-beta.2 |
| CVE-2026-44213 | 6.5 | May 26 | OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured Affected: < 1.1.0 |
| CVE-2026-41484 | 5.9 | May 6 | OpenTelemetry.Exporter.OneCollector vulnerable to denial of service via unbounded HTTP error response body Affected: <= 1.15.0 |
| CVE-2026-41483 | 5.9 | May 6 | Unbounded HTTP response body read in OpenTelemetry.Resources.Azure Affected: <= 1.15.0-beta.1 |
| CVE-2026-41173 | 5.9 | Apr 23 | Unbounded HTTP response body read in OpenTelemetry.Sampler.AWS Affected: < 0.1.0-alpha.8 |
Showing 6