Skip to content
OpenAdvisories

Package · Go

go.opentelemetry.io/otel/sdk/log

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2026-128085

    opentelemetry-go: AttributeValueLengthLimit is fully bypassed by attribute values composed of valid U+FFFD runes

    OpenTelemetry-Go is the Go implementation of OpenTelemetry. From SDK version 1.33.0, SDK log version 0.9.0, and trace version 1.35.0 until version 1.47.0, the AttributeValueLengthLimit and WithAttributeValueLengthLimit truncation paths in sdk/internal/attrnor…

    open-telemetry opentelemetry-go go.opentelemetry.io/otel/sdk zot Debian Wolfi Go
  • Medium 6.3
    CVE-2026-81872

    OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full

    OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is…

    open-telemetry opentelemetry-go kubescape guac Debian Ubuntu Azure Linux Wolfi Go