CLEANSTART-2026-KZ39555 Security fix for CVE-2026-79921 applied in: keda 2.17.2-r2, keda 2.20.2-r2, opentelemetry-collector-contrib 0.157.0-r1

CVE-2026-79921 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XJ29486 Security fix for CVE-2026-85525 applied in: opentelemetry-collector-contrib 0.157.0-r2, vault 2.0.4-r5

CVE-2026-85525 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-102147

Security vulnerability affects the opentelemetry-collector-contrib package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101201

Security vulnerability affects the opentelemetry-collector-contrib package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100887

Security vulnerability affects the opentelemetry-collector-contrib package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100229

Security vulnerability affects the opentelemetry-collector-contrib package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101157

Security vulnerability affects the opentelemetry-collector-contrib package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101744

Security vulnerability affects the opentelemetry-collector-contrib package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100540

Security vulnerability affects the opentelemetry-collector-contrib package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101260

Security vulnerability affects the opentelemetry-collector-contrib package. This issue is resolved in later releases. See references for vulnerability details...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.161.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.161.0-0.1.hum1.src src...

CVE-2026-55701

The OpenTelemetry Collector Contrib repository contains components for the OpenTelemetry Collector. Prior to 0.151.0, the githubreceiver validates the receiver/githubreceiver/config.go RequiredHeaders configuration at startup, but receiver/githubreceiver/tracereceiver.go handleReq does not check...

DEBIAN-CVE-2026-55701

The OpenTelemetry Collector Contrib repository contains components for the OpenTelemetry Collector. Prior to 0.151.0, the githubreceiver validates the receiver/githubreceiver/config.go RequiredHeaders configuration at startup, but receiver/githubreceiver/tracereceiver.go handleReq does not check...

CVE-2026-55701

The OpenTelemetry Collector Contrib githubreceiver component contains an authentication bypass. Prior to 0.151.0 , the handleReq() function in trace_receiver.go does not enforce the RequiredHeaders configuration on incoming webhook requests—those headers are only validated at startup in config.go...

EUVD-2026-78778

The OpenTelemetry Collector Contrib repository contains components for the OpenTelemetry Collector. Prior to 0.151.0, the githubreceiver validates the receiver/githubreceiver/config.go RequiredHeaders configuration at startup, but receiver/githubreceiver/tracereceiver.go handleReq does not check...

CVE-2026-55701

Removed by vendor...

CVE-2026-55701: Incorrect Authorization

The OpenTelemetry Collector Contrib repository contains components for the OpenTelemetry Collector. Prior to 0.151.0, the githubreceiver validates the receiver/githubreceiver/config.go RequiredHeaders configuration at startup, but receiver/githubreceiver/tracereceiver.go handleReq does not check...

CLEANSTART-2026-TP13569 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-SH05010 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

CVE-2026-79921 vulnerabilities

Vulnerabilities for packages: versitygw, telegraf, argo-events-fips, minio, argo-events, dapr-fips, guac, keda, opentelemetry-collector-contrib, bento, trufflehog-fips, falcosidekick-fips, falcosidekick, versitygw-fips, sftpgo-plugin-pubsub, opentelemetry-collector-contrib-fips, dapr,...