golang-opentelemetry-otel vulnerabilities (Ubuntu)
10 vulnerabilities.
golang-opentelemetry-otelUbuntuOpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning6.3 Mediumgolang-opentelemetry-otelUbuntuOpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full6.3 Mediumgolang-opentelemetry-otelUbuntuOpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation5.1 Mediumgolang-opentelemetry-otelUbuntuOpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs2.0 Lowgolang-opentelemetry-otelUbuntuOpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access5.9 Mediumgolang-opentelemetry-otelUbuntuOpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parse2.1 Lowgolang-opentelemetry-otelUbuntuOpenTelemetry-Go's baggage parsing no longer caps raw header length5.3 Mediumgolang-opentelemetry-otelUbuntuOpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijacking7.3 Highgolang-opentelemetry-otelUbuntuOpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies5.3 Mediumgolang-opentelemetry-otelUbuntuOpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)7.5 High