871 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-25151
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - opentelemetry-go-contrib is a collection of extensions for OpenTelemetry-Go. The v0.38.0 release of go.opentelemetry.io/contrib/instrumentation/net/http/otelhtt...
Malicious code in opentelemetry-shopify (npm)
The package opentelemetry-shopify was found to contain malicious code...
MAL-2025-28340 Malicious code in opentelemetry-shopify (npm)
The package opentelemetry-shopify was found to contain malicious code...
AlmaLinux 9 : opentelemetry-collector (ALSA-2025:12831)
The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:12831 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly fr...
RHSA-2025:12850 Red Hat Security Advisory: opentelemetry-collector security update
Bulletin has no description...
RHSA-2025:12831 Red Hat Security Advisory: opentelemetry-collector security update
Bulletin has no description...
Moderate: Red Hat Security Advisory: opentelemetry-collector security update
An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Moderate: Red Hat Security Advisory: opentelemetry-collector security update
An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
ALSA-2025:12831 Moderate: opentelemetry-collector security update
Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and othe...
RHEL 10 : opentelemetry-collector (RHSA-2025:12850)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:12850 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: net/http: Request smuggling due to acceptance of inval...
RHEL 9 : opentelemetry-collector (RHSA-2025:12831)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:12831 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: net/http: Request smuggling due to acceptance of invali...
Moderate: opentelemetry-collector security update
Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and othe...
ALSA-2025:12850 Moderate: opentelemetry-collector security update
Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and othe...
ROS-20250801-01
A vulnerability in a set of add-on tools and libraries for the Go language designed to integrate with the OpenTelemetry, OpenTelemetry-Go Contrib is related to unconstrained and unregulated resource allocation when adding net.peer.sock.addr and net.peer.sock.port tags. regulation when adding...
RockyLinux 9 : opentelemetry-collector (RLSA-2025:3411)
The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2025:3411 advisory. golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing CVE-2025-30204 Tenable has extracted the preceding description block directly from...
opentelemetry-collector security update
An update is available for opentelemetry-collector. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpris...
RLSA-2025:3411 Important: opentelemetry-collector security update
Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing CVE-2025-30204 For more details about the security issues, including the impact, a CVSS score,...
Azure Linux 3.0 Security Update: docker-buildx (CVE-2025-0495)
The version of docker-buildx installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0495 advisory. - Buildx is a Docker CLI plugin that extends build capabilities using BuildKit. Cache backends support...
Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.6.1 release
Red Hat build of OpenTelemetry 3.6.1 has been released This release of the Red Hat build of OpenTelemetry provides a CVE fix. Breaking changes: Nothing Deprecations: Nothing Technology Preview features: Nothing Enhancements: Nothing Bug fixes: Nothing Known issues: Nothing...