1401 matches found
Improper Locking
Overview Affected versions of this package are vulnerable to Improper Locking through the bridgeSpan baggage handling in bridge/opentracing/bridge.go. An attacker can crash the process by causing one goroutine to call Span.SetBaggageItem while another goroutine propagates correlation baggage from...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: azure-service-operator, tkn, spqr, argocd-image-updater, kubernetes-csi-external-health-monitor, openfga, caddy, tekton-chains, cluster-api-gcp-controller, datadog-operator, fluent-operator, kube-state-metrics, kubernetes-csi-external-attacher, datadog-agent, grafana...
PT-2026-80733
Name of the Vulnerable Software and Affected Versions OpenTelemetry-Go versions 0.11.0 through 1.44.0 Description The OpenTracing bridge contains an unsynchronized extraBaggageItems map within the bridgeSpan component. Because Go maps do not support safe concurrent read and write access,...
ROS-20260818-73-0008
The vulnerability of adding additional tools and integration libraries for the Go language-based OpenTelemetry framework is related to the use of an unreliable search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...
ROOT-APP-NPM-CVE-2026-44902 CVE-2026-44902 in @opentelemetry/auto-instrumentations-node - Patched by Root
Root has patched CVE-2026-44902 in the @opentelemetry/auto-instrumentations-node package for Root:npm. Multiple fixed versions available...
GO-2024-2911 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-fips, opentelemetry-collector, opentelemetry-collector-contrib, opentelemetry-collector-contrib-fips, spicedb...
GO-2024-2900 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib-fips, opentelemetry-collector-fips, opentelemetry-collector, opentelemetry-collector-contrib...
GO-2025-3650 vulnerabilities
Vulnerabilities for packages: grafana-alloy, splunk-otel-collector, splunk-otel-collector-fips, sqlexporter, opentelemetry-collector-contrib, opentelemetry-collector-contrib-fips, sqlexporter-fips, vault, grafana-alloy-fips...
GO-2024-3110 vulnerabilities
Vulnerabilities for packages: syft, cluster-autoscaler, neuvector-scanner-fips, neuvector-scanner, eks-distro, opentelemetry-collector-contrib-fips, k8s-device-plugin, grafana-alloy, grype, cadvisor, opentelemetry-collector-contrib, ctop, runc, kubernetes, cadvisor-fips, docker, buildah,...
GO-2024-2791 vulnerabilities
Vulnerabilities for packages: grype, neuvector-scanner, cadvisor, opentelemetry-collector-contrib, ctop, opentelemetry-collector-contrib-fips, buildah, wolfictl, kubernetes, cadvisor-fips...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: aws-privateca-issuer, cert-manager-istio-csr, cert-manager-openshift-routes, cert-manager-csi-driver, cert-manager-openshift-routes-fips, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, mariadb-operator-fips, percona-xtradb-cluster-operator,...
GO-2025-3525 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, kubeflow-pipelines, eks-distro, k8sgpt, opentelemetry-collector-contrib-fips, nats, amazon-cloudwatch-agent-fips, amazon-cloudwatch-agent, grafana-alloy, splunk-otel-collector-fips, argo-workflows, opentelemetry-collector-contrib,...
GO-2025-4123 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, argo-events, cluster-api-aws-controller, jitsucom-bulker, sqlexporter-fips, amazon-cloudwatch-agent-fips, argo-events-fips, vault-fips, grafana-alloy, splunk-otel-collector-fips, opentelemetry-collector-contrib, bento,...
GO-2026-5381 vulnerabilities
Vulnerabilities for packages: keda-fips, google-cloud-otel-ops-collector, splunk-otel-collector, mcp-grafana-fips, minio-operator-fips, tempo-fips, istio, loki-fips, beats-fips, datadog-agent, loki, k8sgpt, amazon-cloudwatch-agent-operator, opentelemetry-collector-contrib-fips, nrdot-collector-k8...
GO-2026-5710 vulnerabilities
Vulnerabilities for packages: keda-fips, google-cloud-otel-ops-collector, prometheus-operator-fips, minio-operator-fips, tempo-fips, istio, loki-fips, beats-fips, datadog-agent, loki, k8sgpt, amazon-cloudwatch-agent-operator, nrdot-collector-k8s, metrics-server-fips, jaeger, agentbeat, karma-fips...
GO-2024-2911 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, spicedb, opentelemetry-collector-contrib...
GO-2024-2900 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, opentelemetry-collector-contrib...
GO-2025-3650 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, splunk-otel-collector, grafana-alloy, sqlexporter...