OP
Product
opentelemetry-ebpf-instrumentation
11
CVEs
0
On KEV
8.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 5Low 1
Watch
Add opentelemetry-ebpf-instrumentation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41433 | 8.4 | Apr 24 | OpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR Affected: >= 0.4.0, < 0.8.0 |
| CVE-2026-45686 | 7.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI Affected: >= 0.7.0, < 0.9.0 |
| CVE-2026-45685 | 7.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages Affected: >= 0.1.0, < 0.9.0 |
| CVE-2026-45680 | 7.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU Affected: < 0.9.0 |
| CVE-2026-45678 | 7.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads Affected: < 0.9.0 |
Showing 5