Skip to contentOpen-telemetry vulnerabilities
Newest
- linuxfoundation opentelemetry instrumentation for java, open-telemetry opentelemetry-java-instrumentation, red hat jboss enterprise application platform 8 +1 more +3 moreOpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code ExecutionCVE-2026-33701Public exploitFix available9.3 Critical
- open-telemetry opentelemetry-go, opentelemetry +1 moreOpenTelemetry-Go Affected by Arbitrary Code Execution via PATH HijackingCVE-2026-24051Fix available7.0 High
- open-telemetry opentelemetry-dotnetOpenTelemetry .NET has a Denial of Service (DoS) Vulnerability in API PackageCVE-2025-27513Fix available7.5 High
- open-telemetry opentelemetry-collector-contrib, opentelemetry collector contrib +1 moreOpenTelemetry Collector AWS Firehose Receiver Authentication Bypass VulnerabilityCVE-2024-45043Fix available5.3 Medium
- open-telemetry opentelemetry-collector-contrib, opentelemetry collector contrib +1 moreopen-telemetry has an Observable Timing DiscrepancyCVE-2024-42368Fix available6.5 Medium
- opentelemetry configgrpc, confighttp, opentelemetry +2 more +4 moreOpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPCCVE-2024-36129Fix available8.2 High
- opentelemetry, open-telemetry opentelemetry-dotnet +1 moreSensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCoreCVE-2024-32028Fix available4.1 Medium
- opentelemetry, open-telemetry opentelemetry-go-contrib +1 moreDoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metricsCVE-2023-47108Public exploitFix available7.5 High
- opentelemetry, open-telemetry opentelemetry-go-contrib +1 moreOpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metricsCVE-2023-45142Fix available7.5 High
- opentelemetry, open-telemetry opentelemetry-python-contrib +1 moreopentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metricsCVE-2023-43810Fix available7.5 High
- linuxfoundation opentelemetry instrumentation for java, open-telemetry opentelemetry-java-instrumentation +1 moreInstrumentation for AWS SDK v2 captures email content when using Amazon Simple Email Service (SES) v1 API, exposing that content to the telemetry backendCVE-2023-399516.5 Medium
- open-telemetry opentelemetry-go-contrib, linuxfoundation opentelemetry-go contrib +1 moreDoS vulnerability for high cardinality metrics in opentelemetry-go-contribCVE-2023-25151Fix available7.5 High