GO-2026-4518 vulnerabilities

Vulnerabilities for packages: telegraf, splunk-otel-collector, grafana-alloy, kots, steampipe, bento...

GO-2026-5662 vulnerabilities

Vulnerabilities for packages: minio-operator, prometheus-pushgateway, datadog-agent, keda, trillian, certificate-transparency, minio-object-browser, splunk-otel-collector, aws-otel-collector, grafana-pyroscope, mc, cloud-sql-proxy, telegraf, jaeger, tempo, istio, karma, mcp-grafana, loki, minio...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: minio-operator, prometheus-pushgateway, datadog-agent, node-problem-detector, prometheus-operator, keda, trillian, grafana, certificate-transparency, splunk-otel-collector, aws-otel-collector, prometheus, mc, cloud-sql-proxy, k8sgpt, jaeger, tempo,...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: sqlexporter, amazon-cloudwatch-agent, jitsucom-bulker, splunk-otel-collector, grafana-alloy, bento, opentelemetry-collector-contrib, argo-events, cluster-api-aws-controller...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: k8sgpt, amazon-cloudwatch-agent, argo-workflows, nats, kargo, splunk-otel-collector, tempo, grafana-alloy, kubeflow-pipelines, opentelemetry-collector, opentelemetry-collector-contrib, argo-rollouts...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, eksctl, crossplane-provider-aws-eks, gitea, buildkitd, kaf, docker-cli-buildx, crossplane-provider-aws-firehose, argocd-image-updater, gitlab-pages, terragrunt, ko, prometheus, syft, crossplane-provider-aws-cloudfront,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, eksctl, harbor-registry, kubernetes-dashboard-auth, buildkitd, cluster-api-helm-controller, docker-cli-buildx, kuberlr, nri-memcached, spire-controller-manager, docker-credential-gcr, cloud-provider-vsphere, controller-gen, ko, gobuster, dive, nri-consu...

GHSA-RX9V-2FJR-MHX5 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, splunk-otel-collector...

CVE-2026-5051 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, splunk-otel-collector...

GHSA-RX9V-2FJR-MHX5 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GHSA-M2W4-8GGF-RJ47 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2026-5807 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GHSA-8R5M-3F66-QPR3 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2026-5052 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2026-4525 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2026-3605 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GHSA-MPWR-8VM7-H73F vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-alertsmanagement, crossplane-provider-azure-storagecache, gobuster, crossplane-provider-azure-spring, crossplane-provider-azure-servicenetworking, x509-certificate-exporter-fips, crossplane-provider-azure-servicelinker, goreleaser,...

GHSA-MPWR-8VM7-H73F vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-family-azure, crossplane-provider-azure-authorization, gobuster, external-secrets-operator, nfpm, telegraf, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, nuclei, splunk-otel-collector, x509-certificate-exporter...

ROS-20260624-73-0016

The vulnerability in golang-opentelemetry-otel is related to the use of an unreliable search path. Exploiting this vulnerability can allow an attacker to increase their privileges...

Cross-Site Scripting (XSS)

Vitest is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to the otelCarrier query parameter being inserted directly into an inline module script and treated as JavaScript source rather than data, which allows an attacker to craft a malicious browser-runner URL and execute...