kubernetes-reflector

3 results · Feed

• Medium 5.3
  CVE-2026-40894

  OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers

  OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1.15.2, The implementation details of the baggage, B3 and Jaeger processing code in the OpenTelemetry.Api and O…

  open-telemetry opentelemetry-dotnet OpenTelemetry.Api OpenTelemetry.Extensions.Propagators Wolfi NuGet
  Apr 23, 2026
• Medium 5.3
  CVE-2026-40891

  OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling

  OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protocol (OTLP), the exporter may parse a server-provided grpc-status-details-bin trailer during retry handling. Pri…

  open-telemetry opentelemetry-dotnet OpenTelemetry.Exporter.OpenTelemetryProtocol OpenTelemetry.Exporter.OpenTelemetryProtocol Wolfi NuGet
  Apr 23, 2026
• Medium 6.8
  CVE-2025-9708

  Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks

  A vulnerability exists in the Kubernetes C# client where the certificate validation logic accepts properly constructed certificates from any Certificate Authority (CA) without properly verifying the trust chain. This flaw allows a malicious actor to present a…

  Kubernetes Kubernetes CSharp Client kubernetes-reflector kubernetes-reflector-compat Wolfi NuGet
  Sep 16, 2025