CVE-2026-42602

azureauthextension is the Azure Authenticator Extension. From 0.124.0 to 0.150.0, a server-side authentication bypass in azureauthextension allows any party who holds a single valid Azure access token for any scope the collector's configured identity can mint for to authenticate to any...

CVE-2026-44294 vulnerabilities

Vulnerabilities for packages: kibana, cadence-web, vitess, pulumi, opentelemetry-auto-instrumentations-node, librechat, gemini-cli, kubeflow-centraldashboard, nemo, homepage, renovate...

GHSA-JVWF-75H9-CWGG vulnerabilities

Vulnerabilities for packages: kibana, cadence-web, vitess, pulumi, opentelemetry-auto-instrumentations-node, librechat, gemini-cli, kubeflow-centraldashboard, nemo, homepage, renovate...

GHSA-2PR8-PHX7-X9H3 vulnerabilities

Vulnerabilities for packages: kibana, cadence-web, vitess, pulumi, opentelemetry-auto-instrumentations-node, librechat, gemini-cli, kubeflow-centraldashboard, nemo, homepage, renovate...

GHSA-FX83-V9X8-X52W vulnerabilities

Vulnerabilities for packages: kibana, cadence-web, vitess, pulumi, opentelemetry-auto-instrumentations-node, librechat, gemini-cli, kubeflow-centraldashboard, nemo, homepage, renovate...

GHSA-75PX-5XX7-5XC7 vulnerabilities

Vulnerabilities for packages: kibana, cadence-web, vitess, pulumi, opentelemetry-auto-instrumentations-node, librechat, gemini-cli, kubeflow-centraldashboard, nemo, homepage, renovate...

GHSA-685M-2W69-288Q vulnerabilities

Vulnerabilities for packages: kibana, cadence-web, vitess, pulumi, opentelemetry-auto-instrumentations-node, librechat, gemini-cli, kubeflow-centraldashboard, nemo, homepage, renovate...

CVE-2026-44293 vulnerabilities

Vulnerabilities for packages: kibana, cadence-web, vitess, pulumi, opentelemetry-auto-instrumentations-node, librechat, gemini-cli, kubeflow-centraldashboard, nemo, homepage, renovate...

GHSA-66FF-XGX4-VCHM vulnerabilities

Vulnerabilities for packages: kibana, cadence-web, vitess, pulumi, opentelemetry-auto-instrumentations-node, librechat, gemini-cli, kubeflow-centraldashboard, nemo, homepage, renovate...

GHSA-Q6X5-8V7M-XCRF vulnerabilities

Vulnerabilities for packages: kibana, cadence-web, vitess, pulumi, opentelemetry-auto-instrumentations-node, librechat, gemini-cli, kubeflow-centraldashboard, nemo, homepage, renovate...

CVE-2026-44292 vulnerabilities

Vulnerabilities for packages: kibana, cadence-web, vitess, pulumi, opentelemetry-auto-instrumentations-node, librechat, gemini-cli, kubeflow-centraldashboard, nemo, homepage, renovate...

CVE-2026-44289 vulnerabilities

Vulnerabilities for packages: kibana, cadence-web, vitess, pulumi, opentelemetry-auto-instrumentations-node, librechat, gemini-cli, kubeflow-centraldashboard, nemo, homepage, renovate...

CVE-2026-44288 vulnerabilities

Vulnerabilities for packages: kibana, cadence-web, vitess, pulumi, opentelemetry-auto-instrumentations-node, librechat, gemini-cli, kubeflow-centraldashboard, nemo, homepage, renovate...

CVE-2026-44290 vulnerabilities

Vulnerabilities for packages: kibana, cadence-web, vitess, pulumi, opentelemetry-auto-instrumentations-node, librechat, gemini-cli, kubeflow-centraldashboard, nemo, homepage, renovate...

CVE-2026-44291 vulnerabilities

Vulnerabilities for packages: kibana, cadence-web, vitess, pulumi, opentelemetry-auto-instrumentations-node, librechat, gemini-cli, kubeflow-centraldashboard, nemo, homepage, renovate...

OpenTelemetry Collector Contrib 安全漏洞

OpenTelemetry Collector Contrib is an extensible telemetry data collection component library developed under OpenTelemetry - CNCF. There are security vulnerabilities in versions 0.124.0 to 0.150.0 of OpenTelemetry Collector Contrib. These vulnerabilities stem from the Authenticate method not...

CVE-2026-42191

OpenTelemetry.Exporter.OpenTelemetryProtocol (OTLP exporter) Vulnerability: from 1.8.0 through 1.15.2, when OTEL_DOTNET_EXPERIMENTAL_OTLP_RETRY=disk is used without OTEL_DOTNET_EXPERIMENTAL_OTLP_DISK_RETRY_DIRECTORY_PATH, the retry storage root is resolved with Path.GetTempPath(). The exporter st...

CVE-2026-42191 OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter

OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP OpenTelemetry Protocol exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath when OTELDOTNETEXPERIMENTALOTLPRETRY=disk was set but...

CVE-2026-42191

OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP OpenTelemetry Protocol exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath when OTELDOTNETEXPERIMENTALOTLPRETRY=disk was set but...

CVE-2026-42191 OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter

OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP OpenTelemetry Protocol exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath when OTELDOTNETEXPERIMENTALOTLPRETRY=disk was set but...