GO-2024-2900 vulnerabilities

Vulnerabilities for packages: tempo, opentelemetry-collector-fips, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, opentelemetry-collector...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, k8s-device-plugin, cadvisor-fips, docker, ctop, grype, neuvector-scanner-fips, cadvisor, syft, node-feature-discovery, grafana-alloy-fips, neuvector, k3s, neuvector-scanner, runc, opentelemetry-collector-contrib, podman, eks-distro-fips, gosu...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: cadvisor, kubernetes, wolfictl, neuvector-scanner, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, buildah, cadvisor-fips, ctop, grype...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: vault, amazon-cloudwatch-agent-fips, opentelemetry-collector-contrib, amazon-cloudwatch-agent, sqlexporter, grafana-alloy, cluster-api-aws-controller-fips, dapr, splunk-otel-collector-fips, telegraf, cluster-api-aws-controller, bento, jitsucom-bulker,...

GO-2024-2911 vulnerabilities

Vulnerabilities for packages: spicedb, tempo, opentelemetry-collector, opentelemetry-collector-contrib...

GO-2024-2900 vulnerabilities

Vulnerabilities for packages: tempo, opentelemetry-collector, opentelemetry-collector-contrib...

GO-2025-3650 vulnerabilities

Vulnerabilities for packages: grafana-alloy, splunk-otel-collector, sqlexporter, opentelemetry-collector-contrib...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: nuclei, rclone, datadog-agent, terragrunt, gitlab-runner, minio, tempo, grafana-alloy, kubevela, malcontent, mcp-grafana, dgraph, k8sgpt, goreleaser, k3s, dagger, prometheus, cri-tools, opentelemetry-collector, teleport, witness, opentelemetry-collector-contrib,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: grpc-health-probe, sigstore-scaffolding, smarter-device-manager, falcosidekick, terragrunt, zot, minio, k3d, tempo, spegel, cloudnative-pg, terraform-docs, k8sgpt, dbmate, hubble-ui, rqlite, kots, opa, k3s, dagger, kargo, certificate-transparency, trivy, spire-server...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: ctop, podman, docker, neuvector-scanner, opentelemetry-collector-contrib, syft, k3s, k8s-device-plugin, buildah, grafana-alloy, runc, cadvisor, grype, kubernetes...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: wolfictl, ctop, neuvector-scanner, opentelemetry-collector-contrib, buildah, cadvisor, grype, kubernetes...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: bento, cluster-api-aws-controller, jitsucom-bulker, opentelemetry-collector-contrib, grafana-alloy, splunk-otel-collector, argo-events, amazon-cloudwatch-agent, sqlexporter...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, k8sgpt, opentelemetry-collector-contrib, kargo, nats, argo-workflows, grafana-alloy, splunk-otel-collector, tempo, amazon-cloudwatch-agent, argo-rollouts, opentelemetry-collector...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: nuclei, bank-vaults, thanos, sigstore-scaffolding, rclone, falcoctl, terragrunt, druid, zot, cortex, argo-events, flux-source-controller, rekor, tempo, trino, chezmoi, timestamp-authority, k8sgpt, tekton-chains, velero, goreleaser, flux-kustomize-controller,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: nuclei, bank-vaults, sigstore-scaffolding, terraform-provider-azurerm, rabbitmq-messaging-topology-operator, neuvector-sigstore-interface, aactl, falcoctl, snyk-cli, terragrunt, zot, slsa-verifier, argo-events, flux-source-controller, k3d, rekor,...

CLEANSTART-2026-SW69995 Security fixes in opentelemetry-collector-contrib 0.150.0-r0

Package opentelemetry-collector-contrib version 0.150.0-r0 fixes 8 vulnerabilities: CVE-2026-46595, CVE-2026-33816, CVE-2026-39821, CVE-2026-41602, CVE-2026-34986...

CLEANSTART-2026-MA24172 Security fixes for CVE-2026-2303, CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39822, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42505, CVE-2026-42507, CVE-2026-46595, CVE-2026-48496, ghsa-6g7g-w4f8-9c9x, ghsa-mpwr-8vm7-h73f, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1, 0.152.0-r0

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV21509 Security fixes for CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42507, CVE-2026-46595, ghsa-6g7g-w4f8-9c9x, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...

GO-2026-5690 opentelemetry-collector-contrib: githubreceiver silently ignores configured required_headers authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver

opentelemetry-collector-contrib: githubreceiver silently ignores configured requiredheaders authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.155.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.155.0-0.1.hum1.src src...