AlmaLinux 9 : opentelemetry-collector (ALSA-2025:23729)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:23729 advisory. github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation CVE-2025-68156 Tenable has extracted the preceding...

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpris...

RLSA-2025:23729 Important: opentelemetry-collector security update

Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation CVE-2025-68156 For more details about the security issues, including the...

RockyLinux 9 : opentelemetry-collector (RLSA-2025:23729)

The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2025:23729 advisory. github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation CVE-2025-68156 Tenable has extracted the preceding...

AlmaLinux 10 : opentelemetry-collector (ALSA-2025:23664)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:23664 advisory. github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation CVE-2025-68156 Tenable has extracted the preceding...

RHSA-2025:23729 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

ALSA-2025:23729 Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation CVE-2025-68156 For more details about the security issues, including the impact, a CVSS score,...

Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation CVE-2025-68156 For more details about the security issues, including the impact, a CVSS score,...

RLSA-2025:23664 Important: opentelemetry-collector security update

Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation CVE-2025-68156 For more details about the security issues, including the...

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpri...

RockyLinux 10 : opentelemetry-collector (RLSA-2025:23664)

The remote RockyLinux 10 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2025:23664 advisory. github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation CVE-2025-68156 Tenable has extracted the preceding...

RHSA-2025:23664 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

RHEL 10 : opentelemetry-collector (RHSA-2025:23664)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:23664 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: github.com/expr-lang/expr: Expr: Denial of Service via...

ALSA-2025:23664 Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation CVE-2025-68156 For more details about the security issues, including the impact, a CVSS score,...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: grafana-alloy, jitsucom-bulker, sqlexporter, bento, splunk-otel-collector, cluster-api-aws-controller, opentelemetry-collector-contrib, amazon-cloudwatch-agent, argo-events...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: grafana-alloy, jitsucom-bulker, sqlexporter, bento, splunk-otel-collector, cluster-api-aws-controller, opentelemetry-collector-contrib, amazon-cloudwatch-agent, argo-events...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, dapr-fips, splunk-otel-collector, amazon-cloudwatch-agent-fips, vault-fips, cluster-api-aws-controller, splunk-otel-collector-fips, argo-events-fips, cluster-api-aws-controller-fips, vault, argo-events, telegraf, sqlexporter, grafana-alloy,...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, dapr-fips, splunk-otel-collector, amazon-cloudwatch-agent-fips, vault-fips, cluster-api-aws-controller, splunk-otel-collector-fips, argo-events-fips, cluster-api-aws-controller-fips, vault, argo-events, telegraf, sqlexporter, grafana-alloy,...

BIT-OPENTELEMETRY-COLLECTOR-2024-36129 OpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC

The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process and export telemetry data. An unsafe decompression vulnerability allows unauthenticated attackers to crash the collector via excessive memory consumption. OTel Collector version 0.102.1 fixes this issue...