RHEL 10 : opentelemetry-collector (RHSA-2026:34357)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:34357 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: github.com/prometheus/prometheus: Prometheus:...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: argo-workflows, cloudbeat-fips, traefik, nemo, chisel-fips, kuma, kubescape-server-fips, frankenphp-8.2, frankenphp-8.3, gitea-fips, zarf-fips, calico-fips, gatekeeper, grafana, omnictl-multiarch, gatekeeper-fips, elastic-agent-fips, zitadel, spire-server, gitlab-kas...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: pulumi, syft, guac, podman, kaf, gh, act, snyk-cli, policy-controller, zarf, prometheus-operator, k3s, kine, pulumi-kubernetes-operator, crossplane-provider-azure-sql, trivy, gitea, cosign, tflint, gatus, gitlab-runner, terraform-provider-azurerm, gitlab-kas, eksctl,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: argocd-image-updater, skaffold, mattermost, telegraf, kubescape, cilium-cli, containerd, fscrypt, cloud-provider-aws, kaf, kubernetes, flux-source-controller, helm, snyk-cli, minio, zarf, prometheus-operator, kubernetes-dashboard, osv-scanner, opentelemetry-collector...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: mattermost, telegraf, cilium-cli, containerd, fscrypt, buildah, kaf, cloud-provider-aws, kubernetes, podman, helm, snyk-cli, minio, prometheus-operator, kubernetes-dashboard, opentelemetry-collector, docker-cli-buildx, kine, k3s, cert-manager, cilium, loki,...

GO-2026-5690 opentelemetry-collector-contrib: githubreceiver silently ignores configured required_headers authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver

opentelemetry-collector-contrib: githubreceiver silently ignores configured requiredheaders authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver...

GO-2026-5544 opentelemetry-collector-contrib's azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay in github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension

opentelemetry-collector-contrib's azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay in github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.155.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.155.0-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.153.0-1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.153.0-1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector: opentelemetry-collector-0.153.0-1.hum1 aarch64, x8664 opentelemetry-collector-0.153.0-1.hum1.src src...

CLEANSTART-2026-MC76610 Security fixes for CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42507, CVE-2026-46595, ghsa-6g7g-w4f8-9c9x, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: mattermost, telegraf, fq, terraform-provider-acme, kubernetes, step-issuer, karpenter, helm, snyk-cli, traefik, vale, minio, prometheus-operator, kubernetes-dashboard, opentelemetry-collector, k3s, caddy, cilium, kine, step, kyverno, gitea, grafana-pyroscope,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: mattermost, telegraf, fq, terraform-provider-acme, kubernetes, step-issuer, karpenter, helm, snyk-cli, traefik, vale, minio, prometheus-operator, kubernetes-dashboard, opentelemetry-collector, k3s, caddy, cilium, kine, step, kyverno, gitea, grafana-pyroscope,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: mattermost, telegraf, fq, terraform-provider-acme, kubernetes, step-issuer, karpenter, helm, snyk-cli, traefik, vale, minio, prometheus-operator, kubernetes-dashboard, opentelemetry-collector, k3s, caddy, cilium, kine, step, kyverno, gitea, grafana-pyroscope,...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: mattermost, telegraf, fq, terraform-provider-acme, kubernetes, step-issuer, karpenter, helm, snyk-cli, traefik, vale, minio, prometheus-operator, kubernetes-dashboard, opentelemetry-collector, k3s, caddy, cilium, kine, step, kyverno, gitea, grafana-pyroscope,...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: mattermost, telegraf, fq, terraform-provider-acme, kubernetes, step-issuer, karpenter, helm, snyk-cli, traefik, vale, minio, prometheus-operator, kubernetes-dashboard, opentelemetry-collector, k3s, caddy, cilium, kine, step, kyverno, gitea, grafana-pyroscope,...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: mattermost, telegraf, fq, terraform-provider-acme, kubernetes, step-issuer, karpenter, helm, snyk-cli, traefik, vale, minio, prometheus-operator, kubernetes-dashboard, opentelemetry-collector, k3s, caddy, cilium, kine, step, kyverno, gitea, grafana-pyroscope,...

GHSA-5CV4-JP36-H3MW vulnerabilities

Vulnerabilities for packages: mattermost, telegraf, fq, terraform-provider-acme, kubernetes, step-issuer, karpenter, helm, snyk-cli, traefik, vale, minio, prometheus-operator, kubernetes-dashboard, opentelemetry-collector, k3s, caddy, cilium, kine, step, kyverno, gitea, grafana-pyroscope,...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: mattermost, telegraf, fq, terraform-provider-acme, kubernetes, step-issuer, karpenter, helm, snyk-cli, traefik, vale, minio, prometheus-operator, kubernetes-dashboard, opentelemetry-collector, k3s, caddy, cilium, kine, step, kyverno, gitea, grafana-pyroscope,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: argo-workflows, traefik, ory-kratos-fips, crossplane-provider-aws-route53recoverycontrolconfig, nemo, terraform-provider-acme, crossplane-provider-azure-servicefabric, crossplane-provider-azure-authorization, frankenphp-8.2, frankenphp-8.3, glab, gitea-fips, tenv-fip...