OP
Vendor
Opentelemetry
52
CVEs
0
On KEV
9
New 30D
Products
IN5.8
instrumentation-cassandra-driver
@opentelemetry
1 CVEs0 on KEV1 new
IN5.8
instrumentation-knex
@opentelemetry
1 CVEs0 on KEV1 new
IN5.8
instrumentation-mongoose
@opentelemetry
1 CVEs0 on KEV1 new
IN5.8
instrumentation-mysql
@opentelemetry
1 CVEs0 on KEV1 new
IN5.8
instrumentation-mysql2
@opentelemetry
1 CVEs0 on KEV1 new
IN5.8
instrumentation-oracledb
@opentelemetry
1 CVEs0 on KEV1 new
IN5.8
instrumentation-pg
@opentelemetry
1 CVEs0 on KEV1 new
IN5.8
instrumentation-tedious
@opentelemetry
1 CVEs0 on KEV1 new
OP6.5
opentelemetry-exporter-otlp-proto-http
OpenTelemetry
1 CVEs0 on KEV1 new
OP7.5
Opentelemetry
Opentelemetry
14 CVEs0 on KEV0 new
EI7.5
Ebpf Instrumentation
Opentelemetry
10 CVEs0 on KEV0 new
AU7.5
auto-instrumentations-node
@opentelemetry
1 CVEs0 on KEV0 new
CO7.5
Configgrpc
Opentelemetry
1 CVEs0 on KEV0 new
CO7.5
Confighttp
Opentelemetry
1 CVEs0 on KEV0 new
EX7.5
exporter-prometheus
@opentelemetry
1 CVEs0 on KEV0 new
OP5.3
Opentelemetry.api
Opentelemetry
1 CVEs0 on KEV0 new
OP7.5
Opentelemetry/auto-instrumentations-node
Opentelemetry
1 CVEs0 on KEV0 new
OC7.5
Opentelemetry Collector
Opentelemetry
1 CVEs0 on KEV0 new
OC8.1
Opentelemetry Collector Contrib
Opentelemetry
1 CVEs0 on KEV0 new
OE8.4
Opentelemetry Ebpf Instrumentation
Opentelemetry
1 CVEs0 on KEV0 new
OP5.9
Opentelemetry.exporter.onecollector
Opentelemetry
1 CVEs0 on KEV0 new
OP7.8
Opentelemetry.exporter.opentelemetryprotocol
Opentelemetry
1 CVEs0 on KEV0 new
OP7.5
Opentelemetry/exporter-prometheus
Opentelemetry
1 CVEs0 on KEV0 new
OP5.3
Opentelemetry.exporter.zipkin
Opentelemetry
1 CVEs0 on KEV0 new
OP5.3
Opentelemetry.extensions.propagators
Opentelemetry
1 CVEs0 on KEV0 new
OP7.5
Opentelemetry.opamp.client
Opentelemetry
1 CVEs0 on KEV0 new
OP5.9
Opentelemetry.resources.azure
Opentelemetry
1 CVEs0 on KEV0 new
OP7.5
Opentelemetry/sdk-node
Opentelemetry
1 CVEs0 on KEV0 new
SD7.5
sdk-node
@opentelemetry
1 CVEs0 on KEV0 new
TS5.5
Telemetry Schema Files
Opentelemetry
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112006 | OP opentelemetry-exporter-otlp-proto-http OpenTelemetry | 6.5 | Oct 18 | OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 Improper Certificate Validation |
| CVE-2026-104872 | IN instrumentation-cassandra-driver @opentelemetry | 5.8 | Oct 2 | Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute |
| CVE-2026-54285 | OP Opentelemetry Opentelemetry | 5.3 | Jun 22 | opentelemetry-js: Unbounded memory allocation in W3C Baggage propagation |
| CVE-2026-44967 | OP Opentelemetry Opentelemetry | 5.3 | Jun 12 | opentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response |
| CVE-2026-45287 | TS Telemetry Schema Files Opentelemetry | 5.5 | Jun 4 | OpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parse |
| CVE-2026-41178 | OP Opentelemetry Opentelemetry | 5.3 | Jun 4 | OpenTelemetry-Go's baggage parsing no longer caps raw header length |
| CVE-2026-45686 | EI Ebpf Instrumentation Opentelemetry | 7.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI |
| CVE-2026-45685 | EI Ebpf Instrumentation Opentelemetry | 7.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages |
| CVE-2026-45684 | EI Ebpf Instrumentation Opentelemetry | 5.3 | Jun 2 | OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers |
| CVE-2026-45683 | EI Ebpf Instrumentation Opentelemetry | 3.8 | Jun 2 | OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure |
| CVE-2026-45681 | EI Ebpf Instrumentation Opentelemetry | 5.9 | Jun 2 | OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size |
| CVE-2026-45680 | EI Ebpf Instrumentation Opentelemetry | 7.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU |
| CVE-2026-45679 | EI Ebpf Instrumentation Opentelemetry | 6.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages |
| CVE-2026-45678 | EI Ebpf Instrumentation Opentelemetry | 7.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads |
| CVE-2026-45676 | EI Ebpf Instrumentation Opentelemetry | 5.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent |
| CVE-2026-45682 | EI Ebpf Instrumentation Opentelemetry | 5.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals |
| CVE-2026-44902 | AU auto-instrumentations-node @opentelemetry | 7.5 | May 27 | opentelemetry-js: Prometheus exporter process crash via malformed HTTP request |
| CVE-2026-42602 | OC Opentelemetry Collector Contrib Opentelemetry | 8.1 | May 13 | azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay |
| CVE-2026-42191 | OP Opentelemetry.exporter.opentelemetryprotocol Opentelemetry | 7.8 | May 12 | OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter |
| CVE-2026-42348 | OP Opentelemetry.opamp.client Opentelemetry | 7.5 | May 12 | OpAMP client reads unbounded HTTP response bodies |
| CVE-2026-41484 | OP Opentelemetry.exporter.onecollector Opentelemetry | 5.9 | May 6 | OpenTelemetry.Exporter.OneCollector vulnerable to denial of service via unbounded HTTP error response body |
| CVE-2026-41483 | OP Opentelemetry.resources.azure Opentelemetry | 5.9 | May 6 | Unbounded HTTP response body read in OpenTelemetry.Resources.Azure |
| CVE-2026-41310 | OP Opentelemetry.exporter.zipkin Opentelemetry | 5.3 | May 6 | OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth |
| CVE-2026-41433 | OE Opentelemetry Ebpf Instrumentation Opentelemetry | 8.4 | Apr 24 | OpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR |
| CVE-2026-41078 | OP Opentelemetry Opentelemetry | 5.9 | Apr 23 | OpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path |
| CVE-2026-40894 | OP Opentelemetry Opentelemetry | 5.3 | Apr 23 | OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers |
| CVE-2026-40891 | OP Opentelemetry Opentelemetry | 5.3 | Apr 23 | OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling |
| CVE-2026-40182 | OP Opentelemetry Opentelemetry | 5.9 | Apr 23 | OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies |
| CVE-2026-39883 | OP Opentelemetry Opentelemetry | 7.0 | Apr 8 | OpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijacking |
| CVE-2026-39882 | OP Opentelemetry Opentelemetry | 5.3 | Apr 8 | OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies |
| CVE-2026-29181 | OP Opentelemetry Opentelemetry | 7.5 | Apr 7 | OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification) |
| CVE-2026-24051 | OP Opentelemetry Opentelemetry | 7.0 | Feb 2 | OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking |
| CVE-2024-36129 | CO Configgrpc Opentelemetry | 7.5 | Jun 5 | The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process and export telemetry data |
| CVE-2023-47108 | OP Opentelemetry Opentelemetry | 7.5 | Nov 10 | OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go |
| CVE-2023-45142 | OP Opentelemetry Opentelemetry | 7.5 | Oct 12 | OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go |
| CVE-2023-43810 | OP Opentelemetry Opentelemetry | 7.5 | Oct 6 | OpenTelemetry, also known as OTel for short, is a vendor-neutral open-source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such… |