761 matches found
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: step-fips, nvidia-container-toolkit, kyverno-fips, request-1279-14, prometheus-podman-exporter, secrets-store-csi-driver-provider-aws-fips, cloud-provider-gcp-cloud-controller-manager-fips, libnvidia-container-fips, kubernetes-dashboard-auth-fips,...
Important: Red Hat Security Advisory: opentelemetry-collector security update
An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CLEANSTART-2026-AB04032 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Multiple security vulnerabilities affect the fluent-operator-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...
RHEL 10 : opentelemetry-collector (RHSA-2026:4174)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:4174 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: golang: net/url: Memory exhaustion in query...
Important: opentelemetry-collector security update
Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls CVE-2025-68121 For more details about the security issues,...
ALSA-2026:4177 Important: opentelemetry-collector security update
Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls CVE-2025-68121 For more details about the security issues,...
SUSE CVE-2026-24051
OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking Untrusted Search Paths on macOS/Darwin systems. The resource detection code in sdk/resource/hostid.go executes the ioreg system command using a search pat...
CVE-2026-27141 vulnerabilities
Vulnerabilities for packages: emissary, terraform-provider-aws, harbor, flux-operator, wolfictl, datadog-agent, crossplane-provider-aws-eks, gitlab-pages, linkerd2, cert-manager-webhook-pdns, crossplane-provider-aws-s3, crossplane-provider-aws-cloudformation, pluto, timoni, zarf, contour,...
GHSA-8FJ7-8H3W-XWFM vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-ecs-fips, crossplane-provider-aws-elasticache-fips, grafana-mimir-fips, emissary, kyverno-policy-reporter-fips, crossplane-provider-aws-eks-fips, crossplane-provider-aws-acm, cloud-sql-proxy-fips, terraform-provider-aws, harbor,...
CVE-2026-27141 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-ecs-fips, crossplane-provider-aws-elasticache-fips, grafana-mimir-fips, emissary, kyverno-policy-reporter-fips, crossplane-provider-aws-eks-fips, crossplane-provider-aws-acm, cloud-sql-proxy-fips, terraform-provider-aws, harbor,...
CVE-2026-27903 vulnerabilities
Vulnerabilities for packages: prism, npm, eslint, lerna, opentelemetry-auto-instrumentations-node, opensearch-dashboards, langfuse, node-gyp, kibana, emscripten, actions-runner, arangodb, librechat, opensearch-dashboards-fips, code-server, vitess, saf, serve, renovate, tileserver-gl-fips,...
CVE-2026-27904 vulnerabilities
Vulnerabilities for packages: prism, npm, eslint, lerna, opentelemetry-auto-instrumentations-node, opensearch-dashboards, langfuse, kubeflow-centraldashboard, node-gyp, kibana, emscripten, actions-runner, arangodb, librechat, opensearch-dashboards-fips, code-server, vitess, saf, serve, renovate,...
GHSA-7R86-CG39-JMMJ vulnerabilities
Vulnerabilities for packages: prism, npm, eslint, lerna, opentelemetry-auto-instrumentations-node, opensearch-dashboards, langfuse, node-gyp, kibana, emscripten, actions-runner, arangodb, librechat, opensearch-dashboards-fips, code-server, vitess, saf, serve, renovate, tileserver-gl-fips,...
GHSA-23C5-XMQV-RM74 vulnerabilities
Vulnerabilities for packages: prism, npm, eslint, lerna, opentelemetry-auto-instrumentations-node, opensearch-dashboards, langfuse, kubeflow-centraldashboard, node-gyp, kibana, emscripten, actions-runner, arangodb, librechat, opensearch-dashboards-fips, code-server, vitess, saf, serve, renovate,...
Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.9.0 release
Red Hat build of OpenTelemetry 3.9.0 has been released This release of the Red Hat build of OpenTelemetry provides new features, security improvements, and bug fixes. Breaking changes: The deprecated OpenCensus Receiver, which provided backward compatibility with the OpenCensus project for easier...
RHSA-2026:3289 Red Hat Security Advisory: opentelemetry-collector security update
Bulletin has no description...
RHSA-2026:3288 Red Hat Security Advisory: opentelemetry-collector security update
Bulletin has no description...
RHSA-2026:3287 Red Hat Security Advisory: opentelemetry-collector security update
Bulletin has no description...
Important: Red Hat Security Advisory: opentelemetry-collector security update
An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
Important: Red Hat Security Advisory: opentelemetry-collector security update
An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...