93 matches found
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.160.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.160.0-0.1.hum1.src src...
github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver: OpenTelemetry Collector Contrib githubreceiver: Unauthorized data injection via authentication bypass
A flaw was found in the OpenTelemetry Collector Contrib's githubreceiver component. An unauthenticated attacker can bypass authentication mechanisms, including required headers and HMAC validation, when the 'Secret' field is empty. This allows the attacker to submit arbitrary webhook payloads,...
CLEANSTART-2026-DF04587 Security fixes in opentelemetry-collector-contrib-fips 0.158.0-r3
Package opentelemetry-collector-contrib-fips version 0.158.0-r3 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...
CLEANSTART-2026-WR36950 Security fixes in opentelemetry-collector-contrib 0.159.0-r2
Package opentelemetry-collector-contrib version 0.159.0-r2 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...
CLEANSTART-2026-IA07692 Security fixes in opentelemetry-collector-contrib-fips 0.158.0-r2
Package opentelemetry-collector-contrib-fips version 0.158.0-r2 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...
CLEANSTART-2026-WP42827 Security fixes in opentelemetry-collector-contrib 0.159.0-r1
Package opentelemetry-collector-contrib version 0.159.0-r1 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...
CLEANSTART-2026-LD03070 Security fixes in opentelemetry-collector-contrib-fips 0.159.0-r2
Package opentelemetry-collector-contrib-fips version 0.159.0-r2 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...
CLEANSTART-2026-FB79569 Security fixes in opentelemetry-collector-contrib-fips 0.159.0-r1
Package opentelemetry-collector-contrib-fips version 0.159.0-r1 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...
CLEANSTART-2026-LU79721 Security fixes in opentelemetry-collector-contrib-fips 0.158.0-r1
Package opentelemetry-collector-contrib-fips version 0.158.0-r1 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.159.0-0.1.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.159.0-0.1.1.hum1.src src Security Fixes:...
GO-2024-2900 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, opentelemetry-collector-fips, opentelemetry-collector-contrib-fips, opentelemetry-collector...
GO-2024-2791 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, cadvisor, ctop, neuvector-scanner, buildah, grype, wolfictl, opentelemetry-collector-contrib-fips, kubernetes, cadvisor-fips...
GO-2024-3110 vulnerabilities
Vulnerabilities for packages: k3s, kubernetes-fips, neuvector-scanner-fips, grafana-alloy-fips, neuvector-scanner, cluster-autoscaler-fips, syft, eks-distro-fips, neuvector, cadvisor, gosu, eks-distro, grafana-alloy, k8s-device-plugin, docker, grype, kubernetes, cadvisor-fips,...
GO-2025-4123 vulnerabilities
Vulnerabilities for packages: sqlexporter, vault-fips, bento, argo-events, sqlexporter-fips, grafana-alloy, telegraf, cluster-api-aws-controller, argo-events-fips, opentelemetry-collector-contrib, dapr-fips, amazon-cloudwatch-agent-fips, cluster-api-aws-controller-fips, splunk-otel-collector-fips...
GO-2024-2911 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, spicedb, opentelemetry-collector-contrib...
GO-2024-2900 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, opentelemetry-collector-contrib...
GO-2025-3650 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, grafana-alloy, opentelemetry-collector-contrib, sqlexporter...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: vcluster, tempo, dagger, opentelemetry-collector, loki, k8sgpt, terraform-mcp-server, witness, gitlab-runner, ollama, lazygit, minio, terragrunt, grafana-alloy, nuclei, rclone, malcontent, datadog-agent, redpanda, maru, k3s, nfpm, opentelemetry-collector-contrib,...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: osv-scanner, hubble-ui, vcluster, k8sgpt-operator, kaniko, kargo, dagger, trivy, opentelemetry-collector, guac, dex, zarf, k8sgpt, cloudnative-pg, ferretdb, smarter-device-manager, step, kwok, minio, terragrunt, k3d, sops, fulcio, k3s, grafana-mimir, restic,...