FORGE: Multi-Agent Graduated Exploitation and Detection Engineering

Vulnerability disclosure volumes now far exceed organizational assessment capacity, yet three adjacent research communities proof-of-concept generation, vulnerability prioritization, and detection rule engineering operate largely in isolation. Existing automated exploit generation systems report...

OpenTelemetry eBPF Instrumentation 安全漏洞

OpenTelemetry eBPF Instrumentation is an open-source eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. There were security vulnerabilities in the version of OpenTelemetry eBPF Instrumentation from 0.7.0 to 0.9.0. These vulnerabilities stemmed from the log enhancer’...

OpenTelemetry eBPF Instrumentation 安全漏洞

OpenTelemetry eBPF Instrumentation is an open-source eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. Versions of OpenTelemetry eBPF Instrumentation prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from the use of a custom...

OpenTelemetry eBPF Instrumentation 安全漏洞

OpenTelemetry eBPF Instrumentation is an open-source, eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. Versions of OpenTelemetry eBPF Instrumentation prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from the Java TLS ioctl probe usi...

OpenTelemetry eBPF Instrumentation 安全漏洞

OpenTelemetry eBPF Instrumentation is an open-source eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. Versions of OpenTelemetry eBPF Instrumentation prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from the use of a 256-byte backup...

OpenTelemetry eBPF Instrumentation 安全漏洞

OpenTelemetry eBPF Instrumentation is an open-source eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. Versions of OpenTelemetry eBPF Instrumentation prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from replacing the ELF parser’s...

CVE-2026-42502 vulnerabilities

Vulnerabilities for packages: gitea, step-issuer, traefik, minio, argo-cd, ory-kratos-fips, tenv, nerdctl, kyverno-fips, k3s, crossplane-provider-azure-authorization, crossplane-provider-azure-spring, virt-operator-fips, zot, crossplane-provider-azure-storage, frankenphp-8.5, kots, helm,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: gitea, step-issuer, traefik, minio, argo-cd, ory-kratos-fips, tenv, nerdctl, kyverno-fips, k3s, crossplane-provider-azure-authorization, crossplane-provider-azure-spring, virt-operator-fips, zot, crossplane-provider-azure-storage, frankenphp-8.5, kots, helm,...

GHSA-5CV4-JP36-H3MW vulnerabilities

Vulnerabilities for packages: gitea, step-issuer, traefik, minio, argo-cd, ory-kratos-fips, tenv, nerdctl, kyverno-fips, k3s, crossplane-provider-azure-authorization, crossplane-provider-azure-spring, virt-operator-fips, zot, crossplane-provider-azure-storage, frankenphp-8.5, kots, helm,...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: gitea, step-issuer, traefik, minio, argo-cd, ory-kratos-fips, tenv, nerdctl, kyverno-fips, k3s, crossplane-provider-azure-authorization, crossplane-provider-azure-spring, virt-operator-fips, zot, crossplane-provider-azure-storage, frankenphp-8.5, kots, helm,...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: gitea, step-issuer, traefik, minio, argo-cd, ory-kratos-fips, tenv, nerdctl, kyverno-fips, k3s, crossplane-provider-azure-authorization, crossplane-provider-azure-spring, virt-operator-fips, zot, crossplane-provider-azure-storage, frankenphp-8.5, kots, helm,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: gitea, step-issuer, traefik, minio, argo-cd, ory-kratos-fips, tenv, nerdctl, kyverno-fips, k3s, crossplane-provider-azure-authorization, crossplane-provider-azure-spring, virt-operator-fips, zot, crossplane-provider-azure-storage, frankenphp-8.5, kots, helm,...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: gitea, step-issuer, traefik, minio, argo-cd, ory-kratos-fips, tenv, nerdctl, kyverno-fips, k3s, crossplane-provider-azure-authorization, crossplane-provider-azure-spring, virt-operator-fips, zot, crossplane-provider-azure-storage, frankenphp-8.5, kots, helm,...

CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: gitea, step-issuer, traefik, minio, argo-cd, ory-kratos-fips, tenv, nerdctl, kyverno-fips, k3s, crossplane-provider-azure-authorization, crossplane-provider-azure-spring, virt-operator-fips, zot, crossplane-provider-azure-storage, frankenphp-8.5, kots, helm,...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: gitea, step-issuer, traefik, minio, argo-cd, ory-kratos-fips, tenv, nerdctl, kyverno-fips, k3s, crossplane-provider-azure-authorization, crossplane-provider-azure-spring, virt-operator-fips, zot, crossplane-provider-azure-storage, frankenphp-8.5, kots, helm,...

CVE-2026-25681 vulnerabilities

Vulnerabilities for packages: gitea, step-issuer, traefik, minio, argo-cd, ory-kratos-fips, tenv, nerdctl, kyverno-fips, k3s, crossplane-provider-azure-authorization, crossplane-provider-azure-spring, virt-operator-fips, zot, crossplane-provider-azure-storage, frankenphp-8.5, kots, helm,...

Uncontrolled Resource Consumption

go.opentelemetry.io/obi is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to inefficient processing of BPF probe run-count deltas during histogram observation replay, which allows an attacker to trigger excessive CPU consumption on busy systems, leading to a...

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpri...

RLSA-2026:19135 Important: opentelemetry-collector security update

Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to...

Security Bulletin: IBM CloudPak for Data Scheduling Service is vulnerable to CVE-2026-24051.

Summary OpenTelemetry Collector is used by the CP4D Scheduling Service for telemetry collection. CVE-2026-24051. Vulnerability Details CVEID:CVE-2026-24051 DESCRIPTION: OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to...