Skip to content

go.opentelemetry.io/otel/sdk vulnerabilities (Root)

2 vulnerabilities.

go.opentelemetry.io/otel/sdk RootOpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijackingCVE-2026-39883Public exploitFix available7.3 HighApril 8, 2026
go.opentelemetry.io/otel/sdk RootOpenTelemetry-Go Affected by Arbitrary Code Execution via PATH HijackingCVE-2026-24051Fix available7.0 HighFebruary 2, 2026