398 matches found
GHSA-F7CQ-GVH6-QR25 Monitoring is vulnerable to Archive Slip due to missing checks in sanitization
The sanitizeArchivePath function in pkg/extract/extract.go lines 248–254 is vulnerable to a path traversal bypass due to a missing trailing path separator in the strings.HasPrefix check. A crafted tar archive can write files outside the intended destination directory when using the extractor CLI...
AlmaLinux 9 : opentelemetry-collector (ALSA-2026:4177)
The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:4177 advisory. golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls...
RLSA-2026:4177 Important: opentelemetry-collector security update
Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls CVE-2025-68121 For more details...
opentelemetry-collector security update
An update is available for opentelemetry-collector. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpris...
RHSA-2026:4267 Red Hat Security Advisory: opentelemetry-collector security update
Bulletin has no description...
RHSA-2026:4264 Red Hat Security Advisory: opentelemetry-collector security update
Bulletin has no description...
RHSA-2026:4256 Red Hat Security Advisory: opentelemetry-collector security update
Bulletin has no description...
RHSA-2026:4174 Red Hat Security Advisory: opentelemetry-collector security update
Bulletin has no description...
RHSA-2026:4177 Red Hat Security Advisory: opentelemetry-collector security update
Bulletin has no description...
Important: Red Hat Security Advisory: opentelemetry-collector security update
An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
Important: Red Hat Security Advisory: opentelemetry-collector security update
An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
Important: Red Hat Security Advisory: opentelemetry-collector security update
An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
AlmaLinux 10 : opentelemetry-collector (ALSA-2026:4174)
The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:4174 advisory. golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls...
RockyLinux 9 : opentelemetry-collector (RLSA-2026:4177)
The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:4177 advisory. golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls...
Important: Red Hat Security Advisory: opentelemetry-collector security update
An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: tetragon, terraform-provider-pagerduty, cadvisor, crossplane-provider-aws-firehose, newrelic-infrastructure-agent, azurefile-csi, wave, tkn, spqr, vt-cli, oras, k8sgpt, rootlesskit, datadog-agent, volume-modifier-for-k8s, argo-rollouts, opentelemetry-collector,...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: kpt, knative-client, pulumi-language-java, crossplane-provider-family-aws, crossplane-provider-aws-sns, kubernetes-dashboard-api, snyk-cli, terraform-provider-grafana, tetragon, rancher-agent, terraform-provider-pagerduty, k8s-device-plugin, cadvisor, pulumi, blob-cs...
GHSA-J3GX-2473-5FP8 vulnerabilities
Vulnerabilities for packages: tetragon, terraform-provider-pagerduty, cadvisor, crossplane-provider-aws-firehose, newrelic-infrastructure-agent, azurefile-csi, wave, tkn, spqr, vt-cli, oras, k8sgpt, rootlesskit, datadog-agent, volume-modifier-for-k8s, argo-rollouts, opentelemetry-collector,...
GHSA-RV83-G57W-FR8J vulnerabilities
Vulnerabilities for packages: tetragon, terraform-provider-pagerduty, cadvisor, crossplane-provider-aws-firehose, newrelic-infrastructure-agent, azurefile-csi, wave, tkn, spqr, vt-cli, oras, k8sgpt, rootlesskit, datadog-agent, volume-modifier-for-k8s, argo-rollouts, opentelemetry-collector,...
CVE-2026-27142 vulnerabilities
Vulnerabilities for packages: kpt, knative-client, pulumi-language-java, crossplane-provider-family-aws, crossplane-provider-aws-sns, kubernetes-dashboard-api, snyk-cli, terraform-provider-grafana, tetragon, rancher-agent, terraform-provider-pagerduty, k8s-device-plugin, cadvisor, pulumi, blob-cs...