Skip to content
OpenAdvisories

Package · Go

go.opentelemetry.io/obi

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2026-45686

    OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI

    OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, a remotely reachable integer overflow in OBI's memcached text protocol parser can crash the OBI process and cause…

    open-telemetry opentelemetry-ebpf-instrumentation go.opentelemetry.io/obi Go
  • High 7.5
    CVE-2026-45685

    OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages

    OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.1.0 to before version 0.9.0, malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing a remote unauthen…

    open-telemetry opentelemetry-ebpf-instrumentation go.opentelemetry.io/obi Go
  • High 7.5
    CVE-2026-45678

    OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads

    OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol parser assumes BIND message payloads contain a valid NUL-terminated portal name. A crafted empty or unterminate…

    open-telemetry opentelemetry-ebpf-instrumentation go.opentelemetry.io/obi Go
  • High 8.4
    CVE-2026-41433

    OpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR

    OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From 0.4.0 to before 0.8.0, a flaw in the Java agent injection path allows a local attacker controlling a Java workload to overwrite arbitrary host files whe…

    open-telemetry opentelemetry-ebpf-instrumentation go.opentelemetry.io/obi Go