CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: mattermost, terraform-provider-acme-fips, step-issuer, karpenter, vale, tenv-fips, fq, k6-fips, commercial-grafana, kubernetes-fips, hubble, caddy-fips, art, virt-operator-fips, hydra, vault, kots, virt-operator, istio-fips, telegraf, zot, k3s,...

CVE-2026-25681 vulnerabilities

Vulnerabilities for packages: mattermost, terraform-provider-acme-fips, step-issuer, karpenter, vale, tenv-fips, fq, k6-fips, commercial-grafana, kubernetes-fips, hubble, caddy-fips, art, virt-operator-fips, hydra, vault, kots, virt-operator, istio-fips, telegraf, zot, k3s,...

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpri...

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpris...

OpenTelemetry Collector Contrib 信任管理问题漏洞

OpenTelemetry Collector Contrib is an extensible telemetry data collection component library developed by OpenTelemetry - CNCF. Versions of OpenTelemetry Collector Contrib prior to 1.1.0 contained a trust management vulnerability. This vulnerability stemmed from the lack of validation of HTTPS/TL...

RHSA-2026:19719 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

RHSA-2026:19720 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

RHSA-2026:19353 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

RHSA-2026:19135 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 9 : opentelemetry-collector (RHSA-2026:19353)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:19353 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: net/url: Incorrect parsing of IPv6 host litera...

ALSA-2026:19135 Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: minio, prometheus-pushgateway, datadog-agent, minio-operator, mc, fluent-bit-plugin-loki, metrics-server, trillian, cloud-sql-proxy, karma, splunk-otel-collector, minio-object-browser, opentelemetry-collector-contrib, opentelemetry-operator, telegraf, loki,...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: google-cloud-otel-ops-collector, certificate-transparency, minio-object-browser, datadog-agent, keda-fips, prometheus-pushgateway-fips, k8sgpt, amazon-cloudwatch-agent-operator-fips, metrics-server-fips, cloudzero-agent-fips, beats-fips, elastic-agent-fips, prometheu...

OpenTelemetry Collector Contrib 安全漏洞

OpenTelemetry Collector Contrib is an extensible telemetry data collection component library developed under OpenTelemetry - CNCF. There are security vulnerabilities in versions 0.124.0 to 0.150.0 of OpenTelemetry Collector Contrib. These vulnerabilities stem from the Authenticate method not...

opentelemetry-collector-contrib's azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay

Summary A server-side authentication bypass in azureauthextension allows any party who holds a single valid Azure access token for any scope the collector's configured identity can mint for to authenticate to any OpenTelemetry receiver that uses auth: azureauth. The extension's Authenticate metho...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: go, external-dns, fscrypt, gitaly, hubble, aws-flb-cloudwatch, cilium-cli, falco-no-driver, nerdctl, datadog-agent, spire-server, k3s, chezmoi, libnvidia-container, prometheus-operator, cilium, snyk-cli, k8s-device-plugin, flux, kube-fluentd-operator, argo-cd,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: gitleaks, step-ca, cilium-cli, gh, seaweedfs, spire-server, flux-source-controller, snyk-cli, kubernetes-dashboard, buildah, aactl, splunk-otel-collector, mattermost, docker-cli-buildx, fuse-overlayfs-snapshotter, sriov-network-device-plugin, kind, buf,...