Skip to content
OpenAdvisories

Package · Azure Linux

azurelinux-image-tools

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-81871

    OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning

    OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplog/otlploggrpc package loads OTEL_EXPORTER_OTLP_LOGS_CERTIFICATE, OTEL_EXPORTER_OTLP_CERTIFICATE, and related client certificate environment variables…

    open-telemetry opentelemetry-go zot kots Debian Ubuntu Azure Linux Wolfi Go
  • Medium 6.3
    CVE-2026-81872

    OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full

    OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is…

    open-telemetry opentelemetry-go kubescape guac Debian Ubuntu Azure Linux Wolfi Go
  • Medium 5.3
    CVE-2026-39882

    OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies

    OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the c…

    open-telemetry opentelemetry-go zot kubescape Debian Ubuntu Azure Linux Wolfi Go