GO-2026-4569 vulnerabilities

Vulnerabilities for packages: osv-scanner, gitlab-workhorse-ce, datadog-agent, gptscript, jaeger-fips, datadog-agent-fips, github-mcp-server, gitlab-workhorse-ce-fips, flux-operator, flux-operator-fips, opencost-fips, jaeger, opencost, ferretdb...

GO-2026-4773 vulnerabilities

Vulnerabilities for packages: osv-scanner, gitlab-workhorse-ce, datadog-agent, glab, jaeger-fips, datadog-agent-fips, gitlab-workhorse-ce-fips, livekit-cli, flux-operator, flux-operator-fips, opencost-fips, jaeger, opencost, ferretdb...

GO-2026-5381 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, keda, opentelemetry-collector, fluent-bit-plugin-loki, aws-otel-collector-fips, beats, beats-fips, amazon-cloudwatch-agent-operator, datadog-agent-fips, elastic-agent, cloud-sql-proxy, istio-fips, jaeger-fips, ld-relay-fips, minio,...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: opencost, datadog-agent, ferretdb, osv-scanner, glab, jaeger...

GO-2026-4773 vulnerabilities

Vulnerabilities for packages: opencost, datadog-agent, ferretdb, osv-scanner, glab, jaeger...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: opencost, datadog-agent, ferretdb, gptscript, osv-scanner, jaeger, github-mcp-server...

GO-2026-5662 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, splunk-otel-collector, istio, loki, karma, tempo, certificate-transparency, telegraf, trillian, minio-object-browser, cloud-sql-proxy, jaeger, mcp-grafana, datadog-agent, mc, keda, minio, prometheus-pushgateway, aws-otel-collector, minio-operator...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: grafana, node-problem-detector, splunk-otel-collector, istio, loki, metrics-server, opentelemetry-collector, karma, tempo, certificate-transparency, fluent-bit-plugin-loki, prometheus-operator, trillian, prometheus, cloud-sql-proxy, k8sgpt,...

ROOT-APP-NPM-CVE-2026-59892 CVE-2026-59892 in @opentelemetry/propagator-jaeger - Patched by Root

Root has patched CVE-2026-59892 in the @opentelemetry/propagator-jaeger package for Root:npm. Multiple fixed versions available...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.20.0-0.8.hum1 aarch64, x8664 jaeger-2.20.0-0.8.hum1.src src Security Fixes: jaeger: CVE-2026-62995...

CLEANSTART-2026-AM71470 Security fixes in jaeger-operator 1.65.0-r0

Package jaeger-operator version 1.65.0-r0 fixes 1 vulnerabilities: CVE-2026-24051...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.20.0-0.6.hum1 aarch64, x8664 jaeger-2.20.0-0.6.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.20.0-0.5.hum1 aarch64, x8664 jaeger-2.20.0-0.5.hum1.src src Security Fixes: jaeger: CVE-2026-48586 CVE-2026-55969...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.20.0-0.4.hum1 aarch64, x8664 jaeger-2.20.0-0.4.hum1.src src Security Fixes: jaeger: CVE-2026-48586...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.20.0-0.2.hum1 aarch64, x8664 jaeger-2.20.0-0.2.hum1.src src Security Fixes: jaeger: CVE-2026-56852...

EUVD-2026-42324

OpenTelemetry JavaScript: Denial of service in JaegerPropagator via unhandled exception on a malformed header...

OpenTelemetry JavaScript: Denial of service in `JaegerPropagator` via unhandled exception on a malformed header

Summary @opentelemetry/propagator-jaeger decodes incoming HTTP header values with decodeURIComponent without handling decode errors. A single request carrying a malformed percent-encoded value for example a bare % in an uber-trace-id or uberctx- header throws an uncaught URIError, terminating any...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.19.0-1.1.hum1 aarch64, x8664 jaeger-2.19.0-1.1.hum1.src src Security Fixes: jaeger: CVE-2026-59884 CVE-2026-59885...

CVE-2026-59892

A flaw was found in the @opentelemetry/propagator-jaeger component of OpenTelemetry JavaScript. This vulnerability allows an unauthenticated remote attacker to send specially crafted HTTP header values, specifically uber-trace-id and uberctx-. The component improperly decodes these values without...

Uncaught Exception

Overview @opentelemetry/propagator-jaeger is an OpenTelemetry Jaeger propagator provides HTTP header propagation for systems that are using Jaeger HTTP header format. Affected versions of this package are vulnerable to Uncaught Exception via the JaegerPropagator class when handling incoming HTTP...