GO-2024-2900 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-fips, opentelemetry-collector-contrib, opentelemetry-collector-contrib-fips, opentelemetry-collector, tempo...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: neuvector-fips, grafana-alloy, buildah, node-feature-discovery, runc, docker, k8s-device-plugin, cluster-autoscaler, opentelemetry-collector-contrib-fips, cluster-autoscaler-fips, grype, syft, kubernetes, cadvisor-fips, neuvector, neuvector-scanner-fips, cadvisor,...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, wolfictl, cadvisor, ctop, buildah, opentelemetry-collector-contrib, opentelemetry-collector-contrib-fips, grype, kubernetes, cadvisor-fips...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, dapr-fips, vault-fips, argo-events-fips, grafana-alloy, sqlexporter, jitsucom-bulker, dapr, sqlexporter-fips, cluster-api-aws-controller-fips, amazon-cloudwatch-agent-fips, bento, argo-events, splunk-otel-collector-fips, telegraf, vault,...

GO-2024-2911 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, spicedb, tempo, opentelemetry-collector...

GO-2024-2900 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, tempo, opentelemetry-collector...

GO-2025-3650 vulnerabilities

Vulnerabilities for packages: grafana-alloy, sqlexporter, splunk-otel-collector, opentelemetry-collector-contrib...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: goreleaser, k8sgpt, k3s, opentelemetry-collector-contrib, dagger, redpanda, dgraph, witness, kubevela, terraform-mcp-server, grafana, lazygit, malcontent, cri-tools, terragrunt, weaviate, maru, opentelemetry-collector, nuclei, minio, gitlab-runner, tempo, prometheus,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dbmate, kaniko, hubble-ui, kubernetes-csi-driver-hostpath, kube-rbac-proxy, kots, vcluster, terraform-provider-google, certificate-transparency, k8sgpt, smarter-device-manager, restic, spegel, guac, kubernetes-csi-external-provisioner, kargo, k3s, k8sgpt-operator,...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: runc, neuvector-scanner, podman, ctop, syft, k3s, grafana-alloy, grype, opentelemetry-collector-contrib, kubernetes, k8s-device-plugin, cadvisor, docker, buildah...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, ctop, wolfictl, grype, opentelemetry-collector-contrib, kubernetes, cadvisor, buildah...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, sqlexporter, splunk-otel-collector, argo-events, grafana-alloy, opentelemetry-collector-contrib, cluster-api-aws-controller, bento, amazon-cloudwatch-agent...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: nats, argo-rollouts, argo-workflows, kargo, kubeflow-pipelines, splunk-otel-collector, opentelemetry-collector, grafana-alloy, opentelemetry-collector-contrib, tempo, k8sgpt, amazon-cloudwatch-agent...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: cosign, flux-source-controller, py3-cassandra-medusa, chezmoi, bank-vaults, goreleaser, secrets-store-csi-driver-provider-azure, k8sgpt, restic, harbor-registry, guac, rook, rekor, opentelemetry-collector-contrib, policy-controller, zot, falcoctl, sops,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: cosign, flux-source-controller, bank-vaults, goreleaser, flux-image-automation-controller, crossplane-provider-family-azure, rabbitmq-messaging-topology-operator, src-fingerprint, guac, rook, kargo, k3s, rekor, opentelemetry-collector-contrib, policy-controller, zot,...

CLEANSTART-2026-SW69995 Security fixes in opentelemetry-collector-contrib 0.150.0-r0

Package opentelemetry-collector-contrib version 0.150.0-r0 fixes 8 vulnerabilities: CVE-2026-46595, CVE-2026-33816, CVE-2026-39821, CVE-2026-41602, CVE-2026-34986...

CLEANSTART-2026-MA24172 Security fixes for CVE-2026-2303, CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39822, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42505, CVE-2026-42507, CVE-2026-46595, CVE-2026-48496, ghsa-6g7g-w4f8-9c9x, ghsa-mpwr-8vm7-h73f, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1, 0.152.0-r0

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV21509 Security fixes for CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42507, CVE-2026-46595, ghsa-6g7g-w4f8-9c9x, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...

GO-2026-5690 opentelemetry-collector-contrib: githubreceiver silently ignores configured required_headers authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver

opentelemetry-collector-contrib: githubreceiver silently ignores configured requiredheaders authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.155.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.155.0-0.1.hum1.src src...