OpenTelemetry.Exporter.OpenTelemetryProtocol

3 results · Feed

• Medium 6.5
  CVE-2026-42191

  OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter

  OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP (OpenTelemetry Protocol) exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath() when OTEL_DOT…

  open-telemetry opentelemetry-dotnet promitor OpenTelemetry.Exporter.OpenTelemetryProtocol Wolfi NuGet
  May 12, 2026
• Medium 5.3
  CVE-2026-40891

  OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling

  OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protocol (OTLP), the exporter may parse a server-provided grpc-status-details-bin trailer during retry handling. Pri…

  open-telemetry opentelemetry-dotnet OpenTelemetry.Exporter.OpenTelemetryProtocol OpenTelemetry.Exporter.OpenTelemetryProtocol Wolfi NuGet
  Apr 23, 2026
• Medium 5.3
  CVE-2026-40182

  OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies

  OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry to a back-end/collector over gRPC or HTTP using OpenTelemetry Protocol format (OTLP), if the request results in a unsuccessful request (i.e. HTTP 4xx …

  open-telemetry opentelemetry-dotnet OpenTelemetry.Exporter.OpenTelemetryProtocol NuGet
  Apr 23, 2026