CVE-2026-41078

🗓️ 23 Apr 2026 18:05:41Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 20 Views

CVE 2026 41078: OpenTelemetry dotnet Jaeger exporter may exhaust memory from unbounded pooled-list sizing.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-41078	23 Apr 202618:05	–	attackerkb
CNNVD	OpenTelemetry .NET 安全漏洞	23 Apr 202600:00	–	cnnvd
Cvelist	CVE-2026-41078 OpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path	23 Apr 202618:05	–	cvelist
Github Security Blog	OpenTelemetry .NET has potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path	18 Apr 202601:05	–	github
NVD	CVE-2026-41078	23 Apr 202619:17	–	nvd
OSV	GHSA-38H3-2333-QX47 OpenTelemetry .NET has potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path	18 Apr 202601:05	–	osv
Positive Technologies	PT-2026-33598	18 Apr 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-41078	5 Jun 202619:36	–	redhatcve
Snyk	Allocation of Resources Without Limits or Throttling	18 Apr 202601:05	–	snyk
Vulnrichment	CVE-2026-41078 OpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path	23 Apr 202618:05	–	vulnrichment

NVD

Vulners

Node

opentelemetry opentelemetryRange<1.6.0.net

opentelemetry opentelemetryMatch1.6.0alpha1.net

opentelemetry opentelemetryMatch1.6.0beta1.net

opentelemetry opentelemetryMatch1.6.0beta2.net

opentelemetry opentelemetryMatch1.6.0beta3.net

opentelemetry opentelemetryMatch1.6.0rc1.net

[
  {
    "vendor": "open-telemetry",
    "product": "opentelemetry-dotnet",
    "versions": [
      {
        "version": "<= 1.6.0-rc.1",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "open-telemetry",
    "product": "OpenTelemetry.Exporter.Jaeger",
    "versions": [
      {
        "version": "<= 1.6.0-rc.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/open-telemetry/opentelemetry-dotnet/security/advisories/GHSA-38h3-2333-qx47

17 Jun 2026 10:46Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.9

EPSS0.00222

SSVC

CWE-770