GO-2024-2900 vulnerabilities

Vulnerabilities for packages: tempo, opentelemetry-collector-fips, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, opentelemetry-collector...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, k8s-device-plugin, cadvisor-fips, docker, ctop, grype, neuvector-scanner-fips, cadvisor, syft, node-feature-discovery, grafana-alloy-fips, neuvector, k3s, neuvector-scanner, runc, opentelemetry-collector-contrib, podman, eks-distro-fips, gosu...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: cadvisor, kubernetes, wolfictl, neuvector-scanner, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, buildah, cadvisor-fips, ctop, grype...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: vault, amazon-cloudwatch-agent-fips, opentelemetry-collector-contrib, amazon-cloudwatch-agent, sqlexporter, grafana-alloy, cluster-api-aws-controller-fips, dapr, splunk-otel-collector-fips, telegraf, cluster-api-aws-controller, bento, jitsucom-bulker,...

GO-2024-2911 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, spicedb, tempo, opentelemetry-collector-contrib...

GO-2024-2900 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, tempo, opentelemetry-collector-contrib...

GO-2025-3650 vulnerabilities

Vulnerabilities for packages: sqlexporter, opentelemetry-collector-contrib, grafana-alloy, splunk-otel-collector...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: maru, prometheus, opentelemetry-collector, k8sgpt, grafana-alloy, mcp-grafana, malcontent, dgraph, nuclei, grafana, weaviate, tempo, eksctl, opentelemetry-collector-contrib, gitlab-runner, terraform-mcp-server, loki, redpanda, terragrunt, ollama, datadog-agent, minio...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: sops, cloudnative-pg, pulumi-language-dotnet, opentelemetry-collector, cert-manager-cmctl, grpc-health-probe, k8sgpt, spegel, guac, fulcio, cilium-cli, kots, restic, step, zot, certificate-transparency, tflint, conftest, step-ca, dbmate, dex, tempo,...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, k3s, runc, ctop, opentelemetry-collector-contrib, grafana-alloy, grype, kubernetes, podman, k8s-device-plugin, buildah, syft, docker, cadvisor...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, ctop, opentelemetry-collector-contrib, grype, kubernetes, buildah, wolfictl, cadvisor...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, splunk-otel-collector, opentelemetry-collector-contrib, cluster-api-aws-controller, grafana-alloy, bento, argo-events, sqlexporter, jitsucom-bulker...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: argo-rollouts, amazon-cloudwatch-agent, splunk-otel-collector, opentelemetry-collector, k8sgpt, tempo, opentelemetry-collector-contrib, grafana-alloy, kargo, argo-workflows, kubeflow-pipelines, nats...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, sops, opentelemetry-collector, k8sgpt, step, trino, guac, fulcio, restic, boring-registry, buildkitd, zot, nuclei, wal-g, step-ca, rook, tkn, chezmoi, druid, kubescape, velero, py3-azure-identity, airflow, flux-image-reflector-controller,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, scorecard, skopeo, slsa-verifier, sops, opentelemetry-collector, zot, guac, fulcio, buildkitd, src-fingerprint, nuclei, step-ca, flux-image-automation-controller, rook, tkn, kubescape, flux-image-reflector-controller, gh, gitsign,...

CLEANSTART-2026-SW69995 Security fixes in opentelemetry-collector-contrib 0.150.0-r0

Package opentelemetry-collector-contrib version 0.150.0-r0 fixes 8 vulnerabilities: CVE-2026-46595, CVE-2026-33816, CVE-2026-39821, CVE-2026-41602, CVE-2026-34986...

CLEANSTART-2026-MA24172 Security fixes for CVE-2026-2303, CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39822, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42505, CVE-2026-42507, CVE-2026-46595, CVE-2026-48496, ghsa-6g7g-w4f8-9c9x, ghsa-mpwr-8vm7-h73f, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1, 0.152.0-r0

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV21509 Security fixes for CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42507, CVE-2026-46595, ghsa-6g7g-w4f8-9c9x, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...

GO-2026-5690 opentelemetry-collector-contrib: githubreceiver silently ignores configured required_headers authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver

opentelemetry-collector-contrib: githubreceiver silently ignores configured requiredheaders authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.155.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.155.0-0.1.hum1.src src...