GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, buildah, kubernetes-csi-node-driver-registrar, memcached-exporter, kargo, amazon-cloudwatch-agent-operator, gcsfuse, aws-flb-cloudwatch, boring-registry, fscrypt, splunk-otel-collector, terraform-provider-pagerduty, caddy, rancher-machine,...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, minio, lazygit, rclone, nuclei, ollama, tempo, terraform-mcp-server, terragrunt-fips, witness, datadog-agent-fips, gitlab-runner-fips, gitlab-runner, datadog-agent, elastic-agent-fips, kubevela-fips, commercial-grafana, elastic-agent,...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: nfpm, loki, minio, grafana-alloy, teleport, weaviate, eksctl, prometheus, terragrunt, redpanda, datadog-agent, witness, malcontent, kubevela, maru, mcp-grafana, goreleaser, gitlab-runner, cri-tools, grafana, opentelemetry-collector-contrib, opentelemetry-collector,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, telegraf, crossplane-provider-aws-firehose, aws-otel-collector, grafana-alloy, crossplane-provider-aws-sns, amazon-cloudwatch-agent, datadog-agent, crossplane-provider-aws-rds, crossplane-provider-aws-ec2,...

ROS-20260327-73-0014

Vulnerability in opentelemetry-collector-contrib related to incorrect resource initialization. Exploitation of the vulnerability may allow an attacker to cause a denial of service...

ROS-20260327-73-0013

Vulnerability in opentelemetry-collector-contrib related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

MiracleLinux 9 : opentelemetry-collector-0.144.0-1.el9_7 (AXSA:2026-330:02)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-330:02 advisory. golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls...

GHSA-F7CQ-GVH6-QR25 Monitoring is vulnerable to Archive Slip due to missing checks in sanitization

The sanitizeArchivePath function in pkg/extract/extract.go lines 248–254 is vulnerable to a path traversal bypass due to a missing trailing path separator in the strings.HasPrefix check. A crafted tar archive can write files outside the intended destination directory when using the extractor CLI...

AlmaLinux 9 : opentelemetry-collector (ALSA-2026:4177)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:4177 advisory. golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls...

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpris...

RLSA-2026:4177 Important: opentelemetry-collector security update

Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls CVE-2025-68121 For more details...

RHSA-2026:4264 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

RHSA-2026:4267 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

RHSA-2026:4256 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

RHSA-2026:4177 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

RHSA-2026:4174 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

RockyLinux 9 : opentelemetry-collector (RLSA-2026:4177)

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:4177 advisory. golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls...