154 matches found
GHSA-8JVR-VH7G-F8GX vulnerabilities
Vulnerabilities for packages: dive, podinfo-fips, authservice, spilo, openbao-fips, thanos-receive-controller-fips, cortex, flannel-cni-plugin, crane, fleet-server-fips, kargo, argo-events-fips, vault-csi-provider-fips, cloud-sql-proxy-fips, net-kourier, kong-ingress-controller, sbom-convert,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: dive, podinfo-fips, authservice, spilo, openbao-fips, thanos-receive-controller-fips, cortex, crane, fleet-server-fips, kargo, argo-events-fips, vault-csi-provider-fips, cloud-sql-proxy-fips, net-kourier, kong-ingress-controller, crossplane-provider-aws-ec2-fips,...
AZL-76790 CVE-2025-58190 affecting package azl-otel-collector 0.127.0-1
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
Malicious Package
Overview ostk-otel-autoconfig is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
AZL-75372 CVE-2025-11065 affecting package azl-otel-collector 0.127.0-1
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...
Malicious code in ostk-otel-autoconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b222e0d41ae144cf784f7fd2c40bd0c9bcb213c76581f4f9285f6f5d3baf36a The package ostk-otel-autoconfig was found to contain malicious code. Source: ghsa-malware...
MAL-2026-511 Malicious code in ostk-otel-autoconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b222e0d41ae144cf784f7fd2c40bd0c9bcb213c76581f4f9285f6f5d3baf36a The package ostk-otel-autoconfig was found to contain malicious code. Source: ghsa-malware...
CVE-2026-23886
Swift W3C TraceContext is a Swift implementation of the W3C Trace Context standard, and Swift OTel is an OpenTelemetry Protocol OTLP backend for Swift Log, Swift Metrics, and Swift Distributed Tracing. Prior to Swift W3C TraceContext version 1.0.0-beta.5 and Swift OTel version 1.0.4, a...
CVE-2026-23886
The CVE-2026-23886 affects the Swift W3C TraceContext component and the Swift OTel OTLP backend when used together; versions prior to 1.0.0-beta.5 (TraceContext) and 1.0.4 (OTel) are vulnerable to a denial-of-service via malformed HTTP headers that fail input validation and can crash the process ...
CVE-2026-23886
Swift W3C TraceContext is a Swift implementation of the W3C Trace Context standard, and Swift OTel is an OpenTelemetry Protocol OTLP backend for Swift Log, Swift Metrics, and Swift Distributed Tracing. Prior to Swift W3C TraceContext version 1.0.0-beta.5 and Swift OTel version 1.0.4, a...
GHSA-VP5W-XCFC-73WF vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
CVE-2025-11621 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GHSA-6H4P-M86H-HHGH vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
CVE-2025-6037 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
CVE-2025-6011 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
CVE-2025-6004 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GHSA-V6R4-35F9-9RPW vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GHSA-QV3P-FMV3-9HWW vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...