CVE-2026-116694

A flaw was found in opentelemetry-propagator-jaeger. A remote attacker could trigger a Denial of Service DoS by sending requests containing numerous or oversized baggage header values. Because the inbound values are processed without limits on entry count or total byte size, the application...

Android ADB Network Propagator

Android ADB Network Propagator is a Metasploit auxiliary module that scans for Android devices exposing ADB over TCP port 5555, installs a supplied Meterpreter APK, and launches it...

CLSA-2026-1793275058 TuxCare security update for @opentelemetry/propagator-jaeger (1 CVE)

TuxCare rebuilt @opentelemetry/propagator-jaeger to address 1 CVE. Fixed in 2.8.0-tuxcare.1...

CLSA-2026-1793272846 TuxCare security update for @opentelemetry/propagator-jaeger (1 CVE)

TuxCare rebuilt @opentelemetry/propagator-jaeger to address 1 CVE. Fixed in 1.27.0-tuxcare.2...

CLSA-2026-1793272717 TuxCare security update for @opentelemetry/propagator-jaeger (1 CVE)

TuxCare rebuilt @opentelemetry/propagator-jaeger to address 1 CVE. Fixed in 1.22.0-tuxcare.2...

PT-2026-140065

TuxCare rebuilt @opentelemetry/propagator-jaeger to address 1 CVE. Fixed in 1.27.0-tuxcare.2...

PT-2026-140074

TuxCare rebuilt @opentelemetry/propagator-jaeger to address 1 CVE. Fixed in 2.8.0-tuxcare.1...

PT-2026-140063

TuxCare rebuilt @opentelemetry/propagator-jaeger to address 1 CVE. Fixed in 1.22.0-tuxcare.2...

CVE-2026-116694

OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...

Linux Distros Unpatched Vulnerability : CVE-2026-116694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes...

DEBIAN-CVE-2026-116694

OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...

CVE-2026-116694

OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...

CVE-2026-116694

OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...

UBUNTU-CVE-2026-116694

OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...

aws-opentelemetry-distro (>=0.0.1, <=0.21.0), aws-opentelemetry-distro-genai-beta (>=0.1.0b4, <=0.1.6) +4 more potentially affected by CVE-2026-116694 via opentelemetry-propagator-jaeger (>=1.9.1, <=1.44.0)

opentelemetry-propagator-jaeger PYPI version =1.9.1, =0.0.1, =0.1.0b4, =0.2.2rc13, =1.2.0, =2.0.0rc2, =2.0.0rc4 - sumologic-opentelemetry 1.9.1 Source cves: CVE-2026-116694 Source advisory: GHSA-F5M9-JFRJ-JJJ7...

GHSA-F5M9-JFRJ-JJJ7 OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation

Summary JaegerPropagator.extract in opentelemetry-propagator-jaeger did not enforce limits when extracting inbound uberctx- baggage headers. Attacker-controlled baggage could cause unnecessary CPU work and short-lived heap allocations while processing more data than the propagator should accept...

OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation

Summary JaegerPropagator.extract in opentelemetry-propagator-jaeger did not enforce limits when extracting inbound uberctx- baggage headers. Attacker-controlled baggage could cause unnecessary CPU work and short-lived heap allocations while processing more data than the propagator should accept...

aws-opentelemetry-distro (>=0.0.1, <=0.21.0), aws-opentelemetry-distro-genai-beta (>=0.1.0b4, <=0.1.6) +4 more potentially affected by CVE-2026-116694 via opentelemetry-propagator-jaeger (>=1.9.1, <=1.44.0)

opentelemetry-propagator-jaeger PYPI version =1.9.1, =0.0.1, =0.1.0b4, =0.2.2rc13, =1.2.0, =2.0.0rc2, =2.0.0rc4 - sumologic-opentelemetry 1.9.1 Source cves: CVE-2026-116694 Source advisory: OSV:GHSA-F5M9-JFRJ-JJJ7...

CVE-2026-116694

OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...

CVE-2026-116694 OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation

OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...