open-telemetry Summary

Latest vulnerabilities published by open-telemetry

JSON RSS CSV 🔔 Create Alert Trigger

7 April 2026

OpenTelemetry-Go Multi-Value Baggage Vulnerability in Go Implementation
CVE-2026-29181
Open-telemetryOpentelemetry-go7.5HIGH

2 February 2026

Path Hijacking Vulnerability in OpenTelemetry Go SDK for macOS
CVE-2026-24051
Open-telemetryOpentelemetry-go7HIGH

5 March 2025

Denial of Service Vulnerability in OpenTelemetry.Api by OpenTelemetry
CVE-2025-27513
Open-telemetryOpentelemetry-dotnet7.5HIGH

13 August 2024

Observability Framework Vulnerable to Timing Attack
CVE-2024-42368
Open-telemetryOpentelemetry-collecto...6.5MEDIUM

10 November 2023

DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics
CVE-2023-47108
Open-telemetryOpentelemetry-go-contrib7.5HIGH

12 October 2023

OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics
CVE-2023-45142
Open-telemetryOpentelemetry-go-contrib7.5HIGH

6 October 2023

opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
CVE-2023-43810
Open-telemetryOpentelemetry-python-c...7.5HIGH

8 August 2023

Instrumentation for AWS SDK v2 captures email content when using Amazon Simple Email Service (SES) v1 API, exposing that content to the telemetry backend
CVE-2023-39951
Open-telemetryOpentelemetry-java-ins...6.5MEDIUM

8 February 2023

DoS vulnerability for high cardinality metrics in opentelemetry-go-contrib
CVE-2023-25151
Open-telemetryOpentelemetry-go-contrib7.5HIGH