CVE-2026-41484

<= 1.15.0

OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP. In versions 1.15

5.3MEDIUM

CVE-2026-41483

<= 1.15.0

OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments. In versions 1.15.0-beta.1 and earlier, the Azu

5.9MEDIUM

CVE-2026-41310

< 1.15.3

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter r

5.3MEDIUM

CVE-2026-41078

< 1.6.0

OpenTelemetry dotnet is a dotnet telemetry framework. In 1.6.0-rc.1 and earlier, OpenTelemetry.Exporter.Jaeger may allow sustained

5.9MEDIUM

CVE-2026-40894

>= 0.5.0 and < 1.15.3

OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Pro

5.3MEDIUM

CVE-2026-40891

>= 1.13.1 and < 1.15.3

OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the O

5.3MEDIUM

CVE-2026-40182

>= 1.13.1 and < 1.15.2

OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry to a back-end/collect

5.3MEDIUM

CVE-2026-39883

>= 1.15.0 and < 1.43.0

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed the Darwin i

7.0HIGH

CVE-2026-39882

< 1.43.0

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) read th

5.3MEDIUM

CVE-2026-29181

>= 1.36.0 and < 1.41.0

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage: header extraction parses e

7.5HIGH

CVE-2025-58460

< 3.1543.1545.vf5a_4ec123769

A missing permission check in Jenkins OpenTelemetry Plugin 3.1543.v8446b_92b_cd64 and earlier allows attackers with Overall/Read p

4.2MEDIUM

CVE-2024-36129

< 0.102.1

The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process and export telemetry data. An unsaf

8.2HIGH

CVE-2023-47108

< 0.46.0

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to ver

7.5HIGH

CVE-2023-45142

< 0.44.0

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. A handler wrapper out of the box adds label

7.5HIGH

CVE-2023-43810

< 0.41b0

OpenTelemetry, also known as OTel for short, is a vendor-neutral open-source Observability framework for instrumenting, generating

7.5HIGH