AlmaLinux 10 : opentelemetry-collector (ALSA-2026:34357)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:34357 advisory. github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint CVE-2026-42154...

RockyLinux 9 : opentelemetry-collector (RLSA-2026:34359)

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:34359 advisory. github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint CVE-2026-42154...

RHSA-2026:34359 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

RHSA-2026:34357 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 10 : opentelemetry-collector (RHSA-2026:34357)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:34357 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: github.com/prometheus/prometheus: Prometheus:...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: flux-source-controller, minio, zitadel, etcd-fips, reports-server, prometheus-operator, skaffold-fips, opentofu-fips, tigera-operator, gitea, gitea-fips, k3s, chisel, knative-serving-fips, cilium, helm, knative-kafka-broker-fips, cloudbeat-fips, containerd,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: guac, flux-notification-controller, crossplane-provider-azure-managedidentity, neuvector-sigstore-interface, docker-machine-driver-harvester, snyk-cli, falco-no-driver, osv-scanner, splunk-otel-collector, containerd, chezmoi, argo-cd, eksctl, kaf, cosign, nuclei, age...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: prometheus-operator, snyk-cli, falco-no-driver, istio, kots, opentelemetry-collector, zarf, external-secrets-operator, cilium, osv-scanner, zot, kine, mattermost, argocd-image-updater, fscrypt, flux-image-automation-controller, k9s, minio, trivy-operator, skaffold,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: prometheus-operator, buildah, snyk-cli, falco-no-driver, istio, kots, opentelemetry-collector, zot, external-secrets-operator, cilium, kine, mattermost, minio, fscrypt, nerdctl, containerd, cert-manager, k3s, external-dns, spire-server, gitlab-kas,...

GO-2026-5690 opentelemetry-collector-contrib: githubreceiver silently ignores configured required_headers authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver

opentelemetry-collector-contrib: githubreceiver silently ignores configured requiredheaders authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver...

GO-2026-5544 opentelemetry-collector-contrib's azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay in github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension

opentelemetry-collector-contrib's azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay in github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.155.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.155.0-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.153.0-1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.153.0-1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector: opentelemetry-collector-0.153.0-1.hum1 aarch64, x8664 opentelemetry-collector-0.153.0-1.hum1.src src...

CLEANSTART-2026-MC76610 Security fixes for CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42507, CVE-2026-46595, ghsa-6g7g-w4f8-9c9x, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: prometheus-operator, hydra, glab, terraform-provider-acme, vale, snyk-cli, falco-no-driver, istio, crossplane-provider-azure-storage, kots, opentelemetry-collector, fq, external-secrets-operator, zot, kine, mattermost, minio, crossplane-provider-aws-elasticache,...

CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: prometheus-operator, hydra, glab, terraform-provider-acme, vale, snyk-cli, falco-no-driver, istio, crossplane-provider-azure-storage, kots, opentelemetry-collector, fq, external-secrets-operator, zot, kine, mattermost, minio, crossplane-provider-aws-elasticache,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: prometheus-operator, hydra, glab, terraform-provider-acme, vale, snyk-cli, falco-no-driver, istio, crossplane-provider-azure-storage, kots, opentelemetry-collector, fq, external-secrets-operator, zot, kine, mattermost, minio, crossplane-provider-aws-elasticache,...