899 matches found
OpenTelemetry eBPF Instrumentation 安全漏洞
OpenTelemetry eBPF Instrumentation is an open-source, eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. Versions of OpenTelemetry eBPF Instrumentation prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from the export of raw Redis erro...
OpenTelemetry eBPF Instrumentation 安全漏洞
OpenTelemetry eBPF Instrumentation is an open-source eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. Versions of OpenTelemetry eBPF Instrumentation prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from the Postgres protocol parser’...
FORGE: Multi-Agent Graduated Exploitation and Detection Engineering
Vulnerability disclosure volumes now far exceed organizational assessment capacity, yet three adjacent research communities proof-of-concept generation, vulnerability prioritization, and detection rule engineering operate largely in isolation. Existing automated exploit generation systems report...
OpenTelemetry eBPF Instrumentation 安全漏洞
OpenTelemetry eBPF Instrumentation is an open-source eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. There were security vulnerabilities in the version of OpenTelemetry eBPF Instrumentation from 0.7.0 to 0.9.0. These vulnerabilities stemmed from the log enhancer’...
OpenTelemetry eBPF Instrumentation 安全漏洞
OpenTelemetry eBPF Instrumentation is an open-source eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. Versions of OpenTelemetry eBPF Instrumentation prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from the use of a custom...
OpenTelemetry eBPF Instrumentation 安全漏洞
OpenTelemetry eBPF Instrumentation is an open-source, eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. Versions of OpenTelemetry eBPF Instrumentation prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from the Java TLS ioctl probe usi...
OpenTelemetry eBPF Instrumentation 安全漏洞
OpenTelemetry eBPF Instrumentation is an open-source eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. Versions of OpenTelemetry eBPF Instrumentation prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from the use of a 256-byte backup...
OpenTelemetry eBPF Instrumentation 安全漏洞
OpenTelemetry eBPF Instrumentation is an open-source eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. Versions of OpenTelemetry eBPF Instrumentation prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from replacing the ELF parser’s...
GHSA-5CV4-JP36-H3MW vulnerabilities
Vulnerabilities for packages: hubble, argo-cd, vitess, snyk-cli, art, gptscript, frankenphp-8.4, cilium-envoy-fips, nemo, kubernetes, prometheus-mongodb-exporter, commercial-grafana, etcd, ingress-nginx-controller, ingress-nginx-controller-fips, reports-server, gitea, crossplane-provider-azure-we...
CVE-2026-42502 vulnerabilities
Vulnerabilities for packages: hubble, argo-cd, vitess, snyk-cli, art, gptscript, frankenphp-8.4, cilium-envoy-fips, nemo, kubernetes, prometheus-mongodb-exporter, commercial-grafana, etcd, ingress-nginx-controller, ingress-nginx-controller-fips, reports-server, gitea, crossplane-provider-azure-we...
CVE-2026-42506 vulnerabilities
Vulnerabilities for packages: hubble, argo-cd, vitess, snyk-cli, art, gptscript, frankenphp-8.4, cilium-envoy-fips, nemo, kubernetes, prometheus-mongodb-exporter, commercial-grafana, etcd, ingress-nginx-controller, ingress-nginx-controller-fips, reports-server, gitea, crossplane-provider-azure-we...
GHSA-CG87-VWWH-XVGJ vulnerabilities
Vulnerabilities for packages: hubble, argo-cd, vitess, snyk-cli, art, gptscript, frankenphp-8.4, cilium-envoy-fips, nemo, kubernetes, prometheus-mongodb-exporter, commercial-grafana, etcd, ingress-nginx-controller, ingress-nginx-controller-fips, reports-server, gitea, crossplane-provider-azure-we...
GHSA-W9P8-PVXH-RXPJ vulnerabilities
Vulnerabilities for packages: hubble, argo-cd, vitess, snyk-cli, art, gptscript, frankenphp-8.4, cilium-envoy-fips, nemo, kubernetes, prometheus-mongodb-exporter, commercial-grafana, etcd, ingress-nginx-controller, ingress-nginx-controller-fips, reports-server, gitea, crossplane-provider-azure-we...
GHSA-M9X8-M34X-FJ9Q vulnerabilities
Vulnerabilities for packages: hubble, argo-cd, vitess, snyk-cli, art, gptscript, frankenphp-8.4, cilium-envoy-fips, nemo, kubernetes, prometheus-mongodb-exporter, commercial-grafana, etcd, ingress-nginx-controller, ingress-nginx-controller-fips, reports-server, gitea, crossplane-provider-azure-we...
CVE-2026-27136 vulnerabilities
Vulnerabilities for packages: hubble, argo-cd, vitess, snyk-cli, art, gptscript, frankenphp-8.4, cilium-envoy-fips, nemo, kubernetes, prometheus-mongodb-exporter, commercial-grafana, etcd, ingress-nginx-controller, ingress-nginx-controller-fips, reports-server, gitea, crossplane-provider-azure-we...
GHSA-WRH2-89VG-4J9G vulnerabilities
Vulnerabilities for packages: hubble, argo-cd, vitess, snyk-cli, art, gptscript, frankenphp-8.4, cilium-envoy-fips, nemo, kubernetes, prometheus-mongodb-exporter, commercial-grafana, etcd, ingress-nginx-controller, ingress-nginx-controller-fips, reports-server, gitea, crossplane-provider-azure-we...
CVE-2026-25680 vulnerabilities
Vulnerabilities for packages: hubble, argo-cd, vitess, snyk-cli, art, gptscript, frankenphp-8.4, cilium-envoy-fips, nemo, kubernetes, prometheus-mongodb-exporter, commercial-grafana, etcd, ingress-nginx-controller, ingress-nginx-controller-fips, reports-server, gitea, crossplane-provider-azure-we...
CVE-2026-25681 vulnerabilities
Vulnerabilities for packages: hubble, argo-cd, vitess, snyk-cli, art, gptscript, frankenphp-8.4, cilium-envoy-fips, nemo, kubernetes, prometheus-mongodb-exporter, commercial-grafana, etcd, ingress-nginx-controller, ingress-nginx-controller-fips, reports-server, gitea, crossplane-provider-azure-we...
Uncontrolled Resource Consumption
go.opentelemetry.io/obi is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to inefficient processing of BPF probe run-count deltas during histogram observation replay, which allows an attacker to trigger excessive CPU consumption on busy systems, leading to a...
RLSA-2026:19135 Important: opentelemetry-collector security update
Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to...