CVE-2026-41484

creationtimestamp| type| source ---|---|--- 2026-05-07 02:40:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla6u4p7om2i...

CVE-2026-41484 OpenTelemetry.Exporter.OneCollector vulnerable to denial of service via unbounded HTTP error response body

OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP. In versions 1.15.0 and earlier, when a request to the configured back-end or collector results in an unsuccessful HTTP 4xx or 5xx response, the HttpJsonPostTransport class reads the...