941 matches found
CVE-2026-45404
creationtimestamp| type| source ---|---|--- 2026-08-20 18:35:13+00:00| published-proof-of-concept| https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-42cj-99w8-cp2p...
OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access
Summary go.opentelemetry.io/otel/bridge/opentracing introduced an unsynchronized extraBaggageItems map on bridgeSpan. One goroutine can write this map through Span.SetBaggageItem while another goroutine reads and iterates it during correlation baggage propagation, which can trigger Go's fatal...
GHSA-42CJ-99W8-CP2P OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access
Summary go.opentelemetry.io/otel/bridge/opentracing introduced an unsynchronized extraBaggageItems map on bridgeSpan. One goroutine can write this map through Span.SetBaggageItem while another goroutine reads and iterates it during correlation baggage propagation, which can trigger Go's fatal...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: keda, rancher-system-agent, tekton-pipelines, tetragon, argocd-image-updater, kots, cluster-api-ipam-provider-in-cluster, rancher, crossplane, apisix-ingress-controller, kyverno-notation-aws, rancher-agent, kubescape, gitlab-kas, kubescape-operator, cloud-provider-aw...
ROOT-APP-NPM-CVE-2026-44902 CVE-2026-44902 in @opentelemetry/auto-instrumentations-node - Patched by Root
Root has patched CVE-2026-44902 in the @opentelemetry/auto-instrumentations-node package for Root:npm. Multiple fixed versions available...
GO-2024-2900 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-fips, opentelemetry-collector, opentelemetry-collector-contrib, opentelemetry-collector-contrib-fips, tempo...
GO-2024-2911 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-fips, opentelemetry-collector, opentelemetry-collector-contrib, spicedb, opentelemetry-collector-contrib-fips, tempo...
GO-2025-3650 vulnerabilities
Vulnerabilities for packages: grafana-alloy-fips, sqlexporter, sqlexporter-fips, splunk-otel-collector-fips, splunk-otel-collector, opentelemetry-collector-contrib, grafana-alloy, vault, opentelemetry-collector-contrib-fips...
GO-2024-3110 vulnerabilities
Vulnerabilities for packages: node-feature-discovery, docker, grype, k8s-device-plugin, podman, opentelemetry-collector-contrib, kubernetes, buildah, neuvector, cadvisor, cadvisor-fips, cluster-autoscaler, eks-distro, eks-distro-fips, kubernetes-fips, gosu, ctop,...
GO-2024-2791 vulnerabilities
Vulnerabilities for packages: cadvisor-fips, opentelemetry-collector-contrib, kubernetes, grype, buildah, ctop, cadvisor, opentelemetry-collector-contrib-fips, wolfictl, neuvector-scanner...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: opentelemetry-operator-fips, cert-manager-google-cas-issuer, mariadb-operator, cert-manager-csi-driver, cert-manager-istio-csr, step-issuer-fips, cert-manager-istio-csr-fips, aws-privateca-issuer-fips, aws-privateca-issuer, cert-manager-webhook-pdns, step-issuer,...
GO-2025-4123 vulnerabilities
Vulnerabilities for packages: telegraf, splunk-otel-collector-fips, argo-events-fips, opentelemetry-collector-contrib, amazon-cloudwatch-agent, vault, dapr-fips, argo-events, dapr, amazon-cloudwatch-agent-fips, bento, cluster-api-aws-controller-fips, sqlexporter, sqlexporter-fips, jitsucom-bulker...
GO-2025-3525 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-fips, keda, splunk-otel-collector-fips, opentelemetry-collector, argo-rollouts-fips, nats, tempo, k8sgpt, argo-rollouts, opentelemetry-collector-contrib, argo-cd, amazon-cloudwatch-agent, kubeflow-pipelines, argo-workflows, eks-distro,...
GO-2026-5381 vulnerabilities
Vulnerabilities for packages: loki-fips, metrics-server-fips, opentelemetry-collector-fips, cloud-sql-proxy-fips, keda, keda-fips, opentelemetry-operator-fips, splunk-otel-collector-fips, minio-object-browser-fips, telegraf, datadog-agent-fips, aws-otel-collector, opentelemetry-collector,...
GO-2026-5710 vulnerabilities
Vulnerabilities for packages: loki-fips, metrics-server-fips, opentelemetry-collector-fips, cloud-sql-proxy-fips, keda, keda-fips, telegraf, datadog-agent-fips, aws-otel-collector, opentelemetry-collector, beats-fips, minio, prometheus-operator, certificate-transparency-fips,...
GO-2024-2911 vulnerabilities
Vulnerabilities for packages: tempo, spicedb, opentelemetry-collector, opentelemetry-collector-contrib...
GO-2024-2900 vulnerabilities
Vulnerabilities for packages: tempo, opentelemetry-collector, opentelemetry-collector-contrib...
GO-2025-3650 vulnerabilities
Vulnerabilities for packages: sqlexporter, splunk-otel-collector, grafana-alloy, opentelemetry-collector-contrib...