CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: zipkin, solr, cassandra-reaper, infinispan, spdx-tools-java, cassandra, dependency-track, spark, neo4j, strimzi-kafka-oauth, jenkins-plugin-manager, strimzi-kafka-operator, gradle, tez, ruby3.2-jrjackson, keycloak-config-cli, sonarqube, trino, apicurio-registry,...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: zipkin, solr, cassandra-reaper, infinispan, spdx-tools-java, cassandra, dependency-track, spark, neo4j, strimzi-kafka-oauth, jenkins-plugin-manager, strimzi-kafka-operator, gradle, tez, ruby3.2-jrjackson, keycloak-config-cli, sonarqube, trino, apicurio-registry,...

GHSA-Q4XH-88C3-WMH7 vulnerabilities

Vulnerabilities for packages: zipkin, solr, cassandra-reaper, infinispan, spdx-tools-java, cassandra, dependency-track, spark, neo4j, strimzi-kafka-oauth, jenkins-plugin-manager, strimzi-kafka-operator, gradle, tez, ruby3.2-jrjackson, keycloak-config-cli, sonarqube, trino, apicurio-registry,...

CVE-2026-19032 vulnerabilities

Vulnerabilities for packages: zipkin, solr, cassandra-reaper, infinispan, spdx-tools-java, cassandra, dependency-track, spark, neo4j, strimzi-kafka-oauth, jenkins-plugin-manager, strimzi-kafka-operator, gradle, tez, ruby3.2-jrjackson, keycloak-config-cli, sonarqube, trino, apicurio-registry,...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: zipkin, solr, cassandra-reaper, infinispan, spdx-tools-java, cassandra, dependency-track, spark, neo4j, strimzi-kafka-oauth, jenkins-plugin-manager, strimzi-kafka-operator, gradle, tez, ruby3.2-jrjackson, keycloak-config-cli, sonarqube, trino, apicurio-registry,...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: zipkin, solr, cassandra-reaper, infinispan, spdx-tools-java, cassandra, dependency-track, spark, neo4j, strimzi-kafka-oauth, jenkins-plugin-manager, strimzi-kafka-operator, gradle, tez, ruby3.2-jrjackson, keycloak-config-cli, sonarqube, trino, apicurio-registry,...

Linux Distros Unpatched Vulnerability : CVE-2026-81870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal...

GHSA-8WMF-6V46-5GFG OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Summary OpenTelemetry Go versions 1.5.0 through 1.44.0 can include trace exporter endpoint configuration in an internal diagnostic log emitted when an SDK TracerProvider is created. The default OpenTelemetry logger does not emit this event. Exposure requires an application to install a logger tha...

AZL-103128 CVE-2026-81870 affecting package cloud-provider-kubevirt 0.5.1-9

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103215 CVE-2026-81870 affecting package kube-vip-cloud-provider 0.0.10-10

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103260 CVE-2026-81870 affecting package prometheus-adapter 0.12.0-10

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103200 CVE-2026-81870 affecting package keda 2.14.1-19

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103236 CVE-2026-81870 affecting package moby-containerd-cc 1.7.7-17

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103116 CVE-2026-81870 affecting package azurelinux-image-tools 1.6.0-3

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103146 CVE-2026-81870 affecting package cri-tools 1.32.0-8

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103052 CVE-2026-81870 affecting package azl-otel-collector 0.127.0-1

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103082 CVE-2026-81870 affecting package kata-containers-preview 3.27.0~preview2-2

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103251 CVE-2026-81870 affecting package opa 0.63.0-5

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103173 CVE-2026-81870 affecting package kata-containers 4.1.0.kata0-1

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103167 CVE-2026-81870 affecting package flannel 0.24.2-32

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...