62 matches found
AZL-82112 CVE-2026-39882 affecting package azurelinux-image-tools for versions less than 1.3.0-1
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters traces/metrics/logs read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the configured collector endpoint is...
AZL-82163 CVE-2026-39882 affecting package containerd2 for versions less than 2.2.4-2
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters traces/metrics/logs read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the configured collector endpoint is...
CVE-2026-39882
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters traces/metrics/logs read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the configured collector endpoint is...
AZL-82193 CVE-2026-39882 affecting package docker-compose for versions less than 2.27.0-9
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters traces/metrics/logs read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the configured collector endpoint is...
AZL-82461 CVE-2026-39882 affecting package moby-engine for versions less than 25.0.3-17
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters traces/metrics/logs read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the configured collector endpoint is...
AZL-82082 CVE-2026-39882 affecting package azl-otel-collector 0.127.0-1
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters traces/metrics/logs read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the configured collector endpoint is...
CVE-2026-39882 OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters traces/metrics/logs read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the configured collector endpoint is...
CVE-2026-39882
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters traces/metrics/logs read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the configured collector endpoint is...
CVE-2026-39882: Memory Allocation with Excessive Size Value
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters traces/metrics/logs read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the configured collector endpoint is...
Malicious code in otlp-trace-export (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-47708 Malicious code in otlp-trace-export (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in otlp-metrics-export (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-47707 Malicious code in otlp-metrics-export (npm)
--- -= Per source details. Do not edit below this line.=-...
Let’s use OpenTelemetry with Spring
Introduction In the dynamic realm of observability, OpenTelemetry is a new set of tools that emerged from the now-deprecated OpenCensus and OpenTracing projects. When it comes to Spring Framework, Spring Boot, Spring Data, and Spring Cloud observability, mature solutions like Micrometer, the de...
Malicious code in otlp-transformer (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9749 Malicious code in otlp-transformer (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in otlp-grpc-exporter-base (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9748 Malicious code in otlp-grpc-exporter-base (npm)
--- -= Per source details. Do not edit below this line.=-...