GHSA-QX7J-JV8M-FPPR vulnerabilities

Vulnerabilities for packages: zipkin, druid, logstash, cassandra-reaper, thingsboard...

CVE-2026-73508 vulnerabilities

Vulnerabilities for packages: zipkin, druid, tez, opensearch, management-api-for-apache-cassandra-5.0, akhq, thingsboard, spark, apache-pulsar, apache-nifi, keycloak, celeborn, apicurio-registry, strimzi-kafka-operator...

CVE-2026-48059 vulnerabilities

Vulnerabilities for packages: zipkin, tez, management-api-for-apache-cassandra-5.0, thingsboard, apache-pulsar, neo4j, apache-activemq-artemis, celeborn, apicurio-registry...

GHSA-H2QV-FJ59-J46J vulnerabilities

Vulnerabilities for packages: zipkin, tez, management-api-for-apache-cassandra-5.0, thingsboard, apache-pulsar, neo4j, apache-activemq-artemis, celeborn, apicurio-registry...

CVE-2026-48059 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, apache-pulsar-fips, seata, apache-activemq-artemis, thingsboard, apicurio-registry, neo4j, hadoop-fips, apache-hop-fips, hono, apache-hop, celeborn, pinot-fips, apache-pulsar, knative-kafka-broker-fips, knative-kafka-broker,...

GHSA-H2QV-FJ59-J46J vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, apache-pulsar-fips, seata, apache-activemq-artemis, thingsboard, apicurio-registry, neo4j, hadoop-fips, apache-hop-fips, hono, apache-hop, celeborn, pinot-fips, apache-pulsar, knative-kafka-broker-fips, knative-kafka-broker,...

CVE-2026-41310

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spa...

CVE-2026-43869 vulnerabilities

Vulnerabilities for packages: zipkin, spark, wavefront-proxy...

GHSA-7PWC-H2J2-RJGJ vulnerabilities

Vulnerabilities for packages: zipkin, spark, wavefront-proxy...

CVE-2026-41310

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spa...

CVE-2026-41310 OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spa...

CVE-2026-41310 OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spa...

CVE-2026-41310

OpenTelemetry.Exporter.Zipkin for .NET (Zipkin exporter) has an unbounded remote endpoint cache in versions up to 1.15.2, where keys derived from span attributes can grow without bound in high-cardinality scenarios, leading to memory growth and degraded availability. The issue is addressed in ver...

CVE-2026-41310 OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spa...

EUVD-2026-28222

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spa...

CVE-2026-41310

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spa...

OpenTelemetry 资源管理错误漏洞

OpenTelemetry is an open-source, vendor-neutral, open-source observability framework developed by OpenTelemetry. Versions of OpenTelemetry 1.15.2 and earlier contained a resource management vulnerability. This vulnerability stemmed from the Zipkin exporter’s remote endpoint caching unbounded key...

OpenTelemetry's Zipkin remote endpoint cache could grow without bounds and increase memory pressure

Summary The Zipkin exporter remote endpoint cache accepted unbounded key growth derived from span attributes. In high-cardinality scenarios, this could increase process memory usage over time and degrade availability. Details - Introduce a bounded, thread-safe LRU cache for remote endpoints. -...

Allocation of Resources Without Limits or Throttling

Overview OpenTelemetry.Exporter.Zipkin is a Zipkin Exporter for OpenTelemetry .NET. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unbounded growth of the remote endpoint cache derived from span attributes. An attacker can cause...

GHSA-88HF-WF7H-7W4M OpenTelemetry's Zipkin remote endpoint cache could grow without bounds and increase memory pressure

Summary The Zipkin exporter remote endpoint cache accepted unbounded key growth derived from span attributes. In high-cardinality scenarios, this could increase process memory usage over time and degrade availability. Details - Introduce a bounded, thread-safe LRU cache for remote endpoints. -...