171 matches found
Malicious code in otel-span-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e800a0d88fb9a757c0ca5ecc09f0217522e72575d3e570a87c167090740de7d The package presents itself as an OpenTelemetry span adapter but on module load schedules a bootstrap routine via setImmediate that reads...
AZL-100971 CVE-2026-84445 affecting package azl-otel-collector 0.127.0-1
gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer allow internal/transport/http2server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go...
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276667. Patch Instructions: To install this SUSE update use the SUSE recommended...
AZL-98253 CVE-2026-37236 affecting package azl-otel-collector 0.127.0-1
grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...
MAL-2026-14384 Malicious code in mlflow-otel-instrumentor (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08cc23ea60cf80f9bf13850e8222ee1cbb7a89643362c703eb402eef08d908c Package metadata impersonates AWS author "AWS Support Team", email [email protected], homepage https://aws.amazon.com/ while the actual payload is...
Malicious code in mlflow-otel-instrumentor (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08cc23ea60cf80f9bf13850e8222ee1cbb7a89643362c703eb402eef08d908c Package metadata impersonates AWS author "AWS Support Team", email [email protected], homepage https://aws.amazon.com/ while the actual payload is...
GO-2025-4070 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GO-2026-5199 vulnerabilities
Vulnerabilities for packages: vault-fips, splunk-otel-collector, vault, splunk-otel-collector-fips...
GO-2026-5487 vulnerabilities
Vulnerabilities for packages: vault-fips, splunk-otel-collector, vault, splunk-otel-collector-fips...
GO-2025-3839 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GO-2025-3842 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GO-2026-5262 vulnerabilities
Vulnerabilities for packages: vault-fips, splunk-otel-collector, vault, splunk-otel-collector-fips...
GO-2025-3840 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GO-2025-3836 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GO-2025-3838 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GO-2025-3841 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GO-2025-3848 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, vault, splunk-otel-collector-fips...
GO-2025-4071 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...