2030 matches found
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration
A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority CA pinning and mutual Transport Layer Security TLS configurations. The issue arises because the environment-only TLS...
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration
A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority CA pinning and mutual Transport Layer Security TLS configurations. The issue arises because the environment-only TLS...
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration
A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority CA pinning and mutual Transport Layer Security TLS configurations. The issue arises because the environment-only TLS...
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration
A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority CA pinning and mutual Transport Layer Security TLS configurations. The issue arises because the environment-only TLS...
CVE-2026-81871
A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority CA pinning and mutual Transport Layer Security TLS configurations. The issue arises because the environment-only TLS...
CLEANSTART-2026-HJ35817 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the cert-manager package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-KQ31223 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the vault package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-PM97219 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-AM62510 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the consul-k8s-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-DK21995 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the cert-manager package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-WP38878 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the cloudnative-pg-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-XH08905 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the cloudnative-pg package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-XD97487 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the cloudnative-pg package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-YZ14479 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the dex package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-UD94273 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the dex package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-FY06810 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the cloudnative-pg package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
Linux Distros Unpatched Vulnerability : CVE-2026-81871
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplog/otlploggrpc package loads...
The vulnerability of the decoder in open-source libraries for working with protobuf and GRPC Wire allows attackers to induce a service failure.
The vulnerability of the decoder in open-source libraries for working with protobuf and GRPC Wire is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service failures remotely...
GHSA-9GM5-9RFH-M6VX CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP
Summary CoreDNS accepted RFC 2136 UPDATE messages over DoH, DoH3, DoQ, and DNS-over-gRPC, then allowed the proxy/forward plugin to send them unchanged to an upstream DNS server. UDP, TCP, and DoT rejected the same opcode before plugin dispatch. If an update-capable upstream trusts CoreDNS's sourc...
