GO-2024-2900 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, tempo, opentelemetry-collector-contrib-fips, opentelemetry-collector, opentelemetry-collector-fips...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: ctop, kubernetes, eks-distro, cadvisor-fips, neuvector, gosu, eks-distro-fips, node-feature-discovery, neuvector-scanner-fips, k8s-device-plugin, cadvisor, opentelemetry-collector-contrib-fips, grype, runc, cluster-autoscaler-fips, syft, neuvector-fips,...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: ctop, kubernetes, opentelemetry-collector-contrib, cadvisor-fips, cadvisor, opentelemetry-collector-contrib-fips, grype, buildah, wolfictl, neuvector-scanner...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: vault-fips, argo-events-fips, cluster-api-aws-controller, jitsucom-bulker, amazon-cloudwatch-agent, argo-events, sqlexporter-fips, splunk-otel-collector, sqlexporter, telegraf, cluster-api-aws-controller-fips, splunk-otel-collector-fips, grafana-alloy, bento, vault,...

GO-2024-2911 vulnerabilities

Vulnerabilities for packages: spicedb, opentelemetry-collector, opentelemetry-collector-contrib, tempo...

GO-2024-2900 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, opentelemetry-collector-contrib, tempo...

GO-2025-3650 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, sqlexporter, grafana-alloy, splunk-otel-collector...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: dgraph, k8sgpt, prometheus, nuclei, opentelemetry-collector, eksctl, mcp-grafana, nfpm, k3s, redpanda, grafana, datadog-agent, ollama, teleport, vcluster, weaviate, loki, kubevela, minio, goreleaser, dagger, opentelemetry-collector-contrib, tempo, cri-tools,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kots, k8sgpt-operator, ferretdb, k8sgpt, cilium-cli, gomplate, dbmate, opentelemetry-collector, kargo, step, k3s, grafana-mimir, sigstore-scaffolding, grafana-agent-operator, terraform-docs, kube-rbac-proxy, spire-server, vcluster, tflint, rqlite, spegel, temporal,...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: syft, neuvector-scanner, k8s-device-plugin, kubernetes, opentelemetry-collector-contrib, runc, buildah, cadvisor, grafana-alloy, podman, docker, ctop, k3s, grype...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, kubernetes, opentelemetry-collector-contrib, buildah, cadvisor, wolfictl, ctop, grype...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, opentelemetry-collector-contrib, bento, jitsucom-bulker, cluster-api-aws-controller, splunk-otel-collector, grafana-alloy, sqlexporter, argo-events...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, k8sgpt, opentelemetry-collector-contrib, tempo, splunk-otel-collector, grafana-alloy, opentelemetry-collector, kubeflow-pipelines, nats, kargo, argo-workflows, argo-rollouts...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: chezmoi, up, k8sgpt, thanos, flux-source-controller, nuclei, opentelemetry-collector, sqlpad, cortex, bank-vaults, flyte, rook, step, grafana-mimir, sigstore-scaffolding, grafana-agent-operator, timestamp-authority, spire-server, flux-image-reflector-controller, hugo...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: skopeo, scorecard, src-fingerprint, flux-source-controller, gomplate, nuclei, snyk-cli, opentelemetry-collector, bank-vaults, kargo, rook, k3s, grafana-mimir, sigstore-scaffolding, vexctl, tkn, timestamp-authority, crossplane-provider-azure-storage, spire-server,...

CLEANSTART-2026-SW69995 Security fixes in opentelemetry-collector-contrib 0.150.0-r0

Package opentelemetry-collector-contrib version 0.150.0-r0 fixes 8 vulnerabilities: CVE-2026-46595, CVE-2026-33816, CVE-2026-39821, CVE-2026-41602, CVE-2026-34986...

CLEANSTART-2026-MA24172 Security fixes for CVE-2026-2303, CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39822, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42505, CVE-2026-42507, CVE-2026-46595, CVE-2026-48496, ghsa-6g7g-w4f8-9c9x, ghsa-mpwr-8vm7-h73f, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1, 0.152.0-r0

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV21509 Security fixes for CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42507, CVE-2026-46595, ghsa-6g7g-w4f8-9c9x, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...

GO-2026-5690 opentelemetry-collector-contrib: githubreceiver silently ignores configured required_headers authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver

opentelemetry-collector-contrib: githubreceiver silently ignores configured requiredheaders authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.155.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.155.0-0.1.hum1.src src...