CVE-2026-69219 vulnerabilities

Vulnerabilities for packages: thingsboard, zipkin, cassandra-reaper, druid...

GHSA-93J5-89VC-PPH4 vulnerabilities

Vulnerabilities for packages: thingsboard, zipkin, cassandra-reaper, druid...

CVE-2026-63337 vulnerabilities

Vulnerabilities for packages: thingsboard, zipkin, cassandra-reaper, druid...

GHSA-5M9F-RPHJ-C435 vulnerabilities

Vulnerabilities for packages: thingsboard, zipkin, cassandra-reaper, druid...

CVE-2026-73508 vulnerabilities

Vulnerabilities for packages: akhq, spark, apache-nifi, druid, opensearch, strimzi-kafka-operator, tez, thingsboard, keycloak, apicurio-registry, management-api-for-apache-cassandra-5.0, zipkin, celeborn, apache-pulsar...

GHSA-H2QV-FJ59-J46J vulnerabilities

Vulnerabilities for packages: tez, apache-activemq-artemis, neo4j, thingsboard, management-api-for-apache-cassandra-5.0, apicurio-registry, zipkin, celeborn, apache-pulsar...

CVE-2026-48059 vulnerabilities

Vulnerabilities for packages: tez, apache-activemq-artemis, neo4j, thingsboard, management-api-for-apache-cassandra-5.0, apicurio-registry, zipkin, celeborn, apache-pulsar...

CVE-2026-48059 vulnerabilities

Vulnerabilities for packages: request-9047-keycloak-fips, apache-activemq-artemis, celeborn, pinot-fips, tez, apache-hop, zipkin, hadoop-fips, seata, neo4j, apicurio-registry, apache-hop-fips, knative-kafka-broker-fips, knative-kafka-broker, apache-pulsar, management-api-for-apache-cassandra-5.0,...

GHSA-H2QV-FJ59-J46J vulnerabilities

Vulnerabilities for packages: request-9047-keycloak-fips, apache-activemq-artemis, celeborn, pinot-fips, tez, apache-hop, zipkin, hadoop-fips, seata, neo4j, apicurio-registry, apache-hop-fips, knative-kafka-broker-fips, knative-kafka-broker, apache-pulsar, management-api-for-apache-cassandra-5.0,...

CVE-2026-41310

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spa...

CVE-2026-43869 vulnerabilities

Vulnerabilities for packages: zipkin, spark...

GHSA-7PWC-H2J2-RJGJ vulnerabilities

Vulnerabilities for packages: zipkin, spark...

CVE-2026-41310

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spa...

CVE-2026-41310 OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spa...

CVE-2026-41310 OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spa...

EUVD-2026-28222

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spa...

CVE-2026-41310

OpenTelemetry.Exporter.Zipkin for .NET (Zipkin exporter) has an unbounded remote endpoint cache in versions up to 1.15.2, where keys derived from span attributes can grow without bound in high-cardinality scenarios, leading to memory growth and degraded availability. The issue is addressed in ver...

CVE-2026-41310 OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spa...

CVE-2026-41310

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spa...

OpenTelemetry 资源管理错误漏洞

OpenTelemetry is an open-source, vendor-neutral, open-source observability framework developed by OpenTelemetry. Versions of OpenTelemetry 1.15.2 and earlier contained a resource management vulnerability. This vulnerability stemmed from the Zipkin exporter’s remote endpoint caching unbounded key...