GO-2026-6616 OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation in go.opentelemetry.io/otel/sdk

OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation in go.opentelemetry.io/otel/sdk...

GO-2026-6615 OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full in go.opentelemetry.io/otel/sdk/log

OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full in go.opentelemetry.io/otel/sdk/log...

SUSE CVE-2026-81872

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is backpressured. NewBatchingProcessor...

Security Bulletin: Impacted IBM Optim 1.0.0 and 1.2.0  by vulnerability in go.opentelemetry.io/otel/sdk

Summary IBM Optim versions 1.0.0 and 1.1.0 include open-source package go.opentelemetry.io/otel/sdk which is affected by a high-severity vulnerability. IBM Optim 1.2.0 resolves this vulnerability by upgrading the affected open-source package to a fixed version. Vulnerability Details...