ROOT-APP-GOBINARY-CVE-2026-39883 CVE-2026-39883 in go.opentelemetry.io/otel/sdk - Patched by Root

Root has patched CVE-2026-39883 in the go.opentelemetry.io/otel/sdk package for Root:Go. Multiple fixed versions available...

opentelemetry-sdk (0.5.0b0) potentially affected by CVE-2026-114603 via opentelemetry-api (0.5.0b0)

opentelemetry-api PYPI version 0.5.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on opentelemetry-api and may be impacted: - opentelemetry-sdk 0.5.0b0 Source cves: CVE-2026-114603 Source advisory: OSV:GHSA-XCQ7-P3PF-P88H...

azure-core-tracing-opentelemetry (1.0.0b6), opentelemetry-azure-monitor (0.4.0b0) +3 more potentially affected by CVE-2026-114603 via opentelemetry-api (0.10.0b0)

opentelemetry-api PYPI version 0.10.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on opentelemetry-api and may be impacted: - azure-core-tracing-opentelemetry 1.0.0b6 - opentelemetry-azure-monitor 0.4.0b0 - opentelemetry-instrumentation 0.10.0b0 -...

opentelemetry-ext-lightstep (0.9.0b0), opentelemetry-instrumentation (0.9.0b0) +2 more potentially affected by CVE-2026-114603 via opentelemetry-api (0.9.0b0)

opentelemetry-api PYPI version 0.9.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on opentelemetry-api and may be impacted: - opentelemetry-ext-lightstep 0.9.0b0 - opentelemetry-instrumentation 0.9.0b0 - opentelemetry-opentracing-shim 0.9.0b0 -...

opentelemetry-sdk (0.2.0a0) potentially affected by CVE-2026-114603 via opentelemetry-api (0.2.0a0)

opentelemetry-api PYPI version 0.2.0a0 is affected by a known vulnerability. The following packages have a transitive dependency on opentelemetry-api and may be impacted: - opentelemetry-sdk 0.2.0a0 Source cves: CVE-2026-114603 Source advisory: OSV:GHSA-XCQ7-P3PF-P88H...

azure-core-tracing-opentelemetry (>=1.0.0b3, <=1.0.0b4), opentelemetry-ext-lightstep (0.6.0b3) +1 more potentially affected by CVE-2026-114603 via opentelemetry-api (0.6.0b0)

opentelemetry-api PYPI version 0.6.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on opentelemetry-api and may be impacted: - azure-core-tracing-opentelemetry =1.0.0b3, =1.0.0b4 - opentelemetry-ext-lightstep 0.6.0b3 - opentelemetry-sdk 0.6.0b0 Source...

opentelemetry-sdk (0.3.0a0) potentially affected by CVE-2026-114603 via opentelemetry-api (0.3.0a0)

opentelemetry-api PYPI version 0.3.0a0 is affected by a known vulnerability. The following packages have a transitive dependency on opentelemetry-api and may be impacted: - opentelemetry-sdk 0.3.0a0 Source cves: CVE-2026-114603 Source advisory: OSV:GHSA-XCQ7-P3PF-P88H...

opentelemetry-sdk (0.4.0a1) potentially affected by CVE-2026-114603 via opentelemetry-api (0.4.0a1)

opentelemetry-api PYPI version 0.4.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on opentelemetry-api and may be impacted: - opentelemetry-sdk 0.4.0a1 Source cves: CVE-2026-114603 Source advisory: OSV:GHSA-XCQ7-P3PF-P88H...

azure-core-tracing-opentelemetry (1.0.0b5), opentelemetry-opentracing-shim (0.8.0b0) +1 more potentially affected by CVE-2026-114603 via opentelemetry-api (0.8.0b0)

opentelemetry-api PYPI version 0.8.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on opentelemetry-api and may be impacted: - azure-core-tracing-opentelemetry 1.0.0b5 - opentelemetry-opentracing-shim 0.8.0b0 - opentelemetry-sdk 0.8.0b0 Source cves:...

opentelemetry-sdk (0.1.0a0) potentially affected by CVE-2026-114603 via opentelemetry-api (0.1.0a0)

opentelemetry-api PYPI version 0.1.0a0 is affected by a known vulnerability. The following packages have a transitive dependency on opentelemetry-api and may be impacted: - opentelemetry-sdk 0.1.0a0 Source cves: CVE-2026-114603 Source advisory: OSV:GHSA-XCQ7-P3PF-P88H...

opentelemetry-ext-lightstep (0.7.0b0), opentelemetry-opentracing-shim (0.7.0b1) +1 more potentially affected by CVE-2026-114603 via opentelemetry-api (0.7.0b1)

opentelemetry-api PYPI version 0.7.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on opentelemetry-api and may be impacted: - opentelemetry-ext-lightstep 0.7.0b0 - opentelemetry-opentracing-shim 0.7.0b1 - opentelemetry-sdk 0.7.0b1 Source cves:...

azure-core-tracing-opentelemetry (1.0.0b2), opentelemetry-sdk (0.4.0a0) potentially affected by CVE-2026-114603 via opentelemetry-api (0.4.0a0)

opentelemetry-api PYPI version 0.4.0a0 is affected by a known vulnerability. The following packages have a transitive dependency on opentelemetry-api and may be impacted: - azure-core-tracing-opentelemetry 1.0.0b2 - opentelemetry-sdk 0.4.0a0 Source cves: CVE-2026-114603 Source advisory:...

opentelemetry-exporter-google-cloud (0.11.0b0), opentelemetry-instrumentation (0.11.0b0) +3 more potentially affected by CVE-2026-114603 via opentelemetry-api (0.11.0b0)

opentelemetry-api PYPI version 0.11.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on opentelemetry-api and may be impacted: - opentelemetry-exporter-google-cloud 0.11.0b0 - opentelemetry-instrumentation 0.11.0b0 - opentelemetry-opentracing-shim...

opentelemetry_sdk has unbounded memory allocation in W3C Baggage propagation

Summary BaggagePropagator::extractwithcontext in opentelemetrysdk did not enforce the W3C Baggage size limits before parsing an inbound baggage header. A large attacker-controlled header could cause unnecessary CPU work and short-lived heap allocations while parsing entries that would later be...

PT-2026-52642

Name of the Vulnerable Software and Affected Versions OpenTelemetry Rust versions 0.32.0 and earlier Description The BaggagePropagator::extract with context function in opentelemetry sdk fails to enforce W3C Baggage size limits before parsing an inbound baggage header. An attacker can provide a...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +3150 more potentially affected by CVE-2026-44902 via @opentelemetry/sdk-node (>=0.10.2, <=0.216.0)

@opentelemetry/sdk-node NPM version =0.10.2, =0.1.0, =0.1.0-dev.00aaa03, =5.0.0, =0.1.1, =0.0.1, =0.8.0, =0.1.1, =0.1.1, =0.1.1, =0.1.8, =0.1.5, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.2.0, =0.2.13 and more Source cves: CVE-2026-44902 Source advisory:...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +2095 more potentially affected by CVE-2026-44902 via @opentelemetry/sdk-node (>=0.57.0, <=0.216.0)

@opentelemetry/sdk-node NPM version =0.57.0, =0.1.0, =0.1.0-dev.00aaa03, =0.1.1, =0.0.1, =0.8.0, =0.1.1, =0.1.1, =0.1.1, =0.1.8, =0.1.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.3.4-0, =0.1.0, =0.4.0, =5.0.1-staging.f17326334 and more Source cves: CVE-2026-44902 Source...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +2095 more potentially affected by CVE-2026-44902 via @opentelemetry/sdk-node (>=0.57.0, <=0.216.0)

@opentelemetry/sdk-node NPM version =0.57.0, =0.1.0, =0.1.0-dev.00aaa03, =0.1.1, =0.0.1, =0.8.0, =0.1.1, =0.1.1, =0.1.1, =0.1.8, =0.1.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.3.4-0, =0.1.0, =0.4.0, =5.0.1-staging.f17326334 and more Source cves: CVE-2026-44902 Source...

openSUSE Security Advisory (SUSE-SU-2024:1639-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:1639-1 Security update for python-arcomplete, python-Fabric, python-PyGithub, python-antlr4-python3-runtime, python-avro, python-chardet, python-distro, python-docker, python-fakeredis, python-fixedint, python-httplib2, python-httpretty, python-javaproperties, python-jsondiff, python-knack, python-marshmallow, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-opentelemetry-sdk, python-opentelemetry-semantic-conventions, python-opentelemetry-test-utils, python-pycomposefile, python-pydash, python-redis, python-retrying, python-semver, python-sshtunnel, python-strictyaml, python-sure, python-vcrpy, python-xmltodict

This update for python-argcomplete, python-Fabric, python-PyGithub, python-antlr4-python3-runtime, python-avro, python-chardet, python-distro, python-docker, python-fakeredis, python-fixedint, python-httplib2, python-httpretty, python-javaproperties, python-jsondiff, python-knack,...