GO-2026-5248 OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU in go.opentelemetry.io/obi

OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU in go.opentelemetry.io/obi...

Linux Distros Unpatched Vulnerability : CVE-2026-44967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenTelemetry-cpp is the C++ implementation of OpenTelemetry. Prior to release 1.27.0, the OTLP HTTP exporters traces/metrics/logs read the full HTTP response...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the W3CBaggagePropagator function. An attacker can cause excessive memory allocation and CPU consumption by sending oversized baggage data, which is automatically re-injected into...

OpenTelemetry .NET 安全漏洞

OpenTelemetry .NET is the .NET client for OpenTelemetry from OpenTelemetry, Inc. A security vulnerability exists in OpenTelemetry .NET versions 1.10.0 through 1.11.1 that stems from improper handling of headers, resulting in a denial of service attack...