PT-2026-80733

Name of the Vulnerable Software and Affected Versions OpenTelemetry-Go versions 0.11.0 through 1.44.0 Description The OpenTracing bridge contains an unsynchronized extraBaggageItems map within the bridgeSpan component. Because Go maps do not support safe concurrent read and write access,...

ROOT-APP-NPM-CVE-2026-44902 CVE-2026-44902 in @opentelemetry/auto-instrumentations-node - Patched by Root

Root has patched CVE-2026-44902 in the @opentelemetry/auto-instrumentations-node package for Root:npm. Multiple fixed versions available...

GO-2024-2900 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, opentelemetry-collector, opentelemetry-collector-fips, tempo, opentelemetry-collector-contrib...

GO-2024-2911 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, opentelemetry-collector, opentelemetry-collector-fips, tempo, spicedb, opentelemetry-collector-contrib...

GO-2025-3650 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, splunk-otel-collector, opentelemetry-collector-contrib-fips, grafana-alloy-fips, sqlexporter-fips, sqlexporter, vault, splunk-otel-collector-fips, grafana-alloy...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, cluster-autoscaler, runc, k8s-device-plugin, neuvector-fips, cadvisor, eks-distro, neuvector-scanner, syft, docker, neuvector-scanner-fips, podman, grafana-alloy, neuvector, eks-distro-fips, ctop, buildah, cadvisor-fips, gosu, k3s,...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: ctop, opentelemetry-collector-contrib, buildah, neuvector-scanner, cadvisor-fips, opentelemetry-collector-contrib-fips, grype, cadvisor, kubernetes, wolfictl...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: mariadb-operator, cert-manager-istio-csr, cert-manager-webhook-pdns, gitlab-operator, cert-manager-csi-driver, aws-privateca-issuer, cert-manager-cmctl, percona-server-mongodb-operator-fips, aws-privateca-issuer-fips, cert-manager-google-cas-issuer-fips,...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: argo-workflows, argo-cd-fips, opentelemetry-collector-fips, tempo, kargo, eks-distro, argo-rollouts-fips, splunk-otel-collector, splunk-otel-collector-fips, keda, grafana-alloy, argo-workflows-fips, eks-distro-fips, kubeflow-pipelines,...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller-fips, jitsucom-bulker, telegraf, dapr, splunk-otel-collector, bento, dapr-fips, sqlexporter-fips, splunk-otel-collector-fips, grafana-alloy, argo-events, vault-fips, cluster-api-aws-controller, vault, amazon-cloudwatch-agent, sqlexporter,...

GO-2026-5381 vulnerabilities

Vulnerabilities for packages: minio, metrics-server, opentelemetry-collector-fips, telegraf, tempo, datadog-agent-fips, cloud-sql-proxy-fips, aws-otel-collector, datadog-agent, jaeger, amazon-cloudwatch-agent-operator, minio-operator-fips, elastic-agent-fips, amazon-cloudwatch-agent-operator-fips...

GO-2026-5710 vulnerabilities

Vulnerabilities for packages: minio, metrics-server, opentelemetry-collector-k8s, opentelemetry-collector-fips, telegraf, tempo, datadog-agent-fips, cloud-sql-proxy-fips, aws-otel-collector, datadog-agent, jaeger, amazon-cloudwatch-agent-operator, minio-operator-fips, elastic-agent-fips,...

GO-2024-2911 vulnerabilities

Vulnerabilities for packages: tempo, spicedb, opentelemetry-collector, opentelemetry-collector-contrib...

GO-2024-2900 vulnerabilities

Vulnerabilities for packages: tempo, opentelemetry-collector, opentelemetry-collector-contrib...

GO-2025-3650 vulnerabilities

Vulnerabilities for packages: sqlexporter, splunk-otel-collector, grafana-alloy, opentelemetry-collector-contrib...

GO-2022-0635 vulnerabilities

Vulnerabilities for packages: kots, k3d, external-secrets-operator, zot, opentelemetry-collector, loki, mattermost...

GO-2022-0646 vulnerabilities

Vulnerabilities for packages: kots, k3d, external-secrets-operator, zot, opentelemetry-collector, loki, mattermost...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: nfpm, loki, minio, grafana-alloy, teleport, weaviate, eksctl, prometheus, terragrunt, redpanda, datadog-agent, witness, malcontent, kubevela, maru, mcp-grafana, goreleaser, gitlab-runner, cri-tools, grafana, opentelemetry-collector-contrib, opentelemetry-collector,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kargo, guac, osv-scanner, minio, terraform-docs, temporal, ferretdb, kubernetes-csi-driver-hostpath, cert-manager-cmctl, spire-server, falcosidekick, grafana-agent-operator, kots, terragrunt, kwok, restic, zot, certificate-transparency, sigstore-scaffolding, step-ca,...

GO-2026-5028 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, telegraf, grafana-pyroscope, falco-no-driver, minio, kubernetes, helm, ingress-nginx-controller, caddy, karpenter, prometheus, kots, traefik, zot, flux, kyverno, nerdctl, cilium, mattermost, fq, hubble,...