Vendor

open-telemetry

63 known vulnerabilities.

Products

opentelemetry-ebpf-instrumentation 11 opentelemetry-go 9 opentelemetry-dotnet 8 opentelemetry-dotnet-contrib 6 opentelemetry-collector-contrib 5 opentelemetry-java-instrumentation 4 opentelemetry-js 3 opentelemetry-go-contrib 3 opentelemetry-python 2 opentelemetry-java 2 OpenTelemetry.Api 1 OpenTelemetry.Extensions.Propagators 1 opentelemetry-python-contrib 1 opentelemetry-operator 1 github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter 1 OpenTelemetry.Exporter.OpenTelemetryProtocol 1 go.opentelemetry.io/otel/schema/v1.1 1 go.opentelemetry.io/otel/schema/v1.0 1 opentelemetry-rust 1 opentelemetry-collector 1 exporter-prometheus 1 sdk-node 1 auto-instrumentations-node 1 go.opentelemetry.io/otel/baggage 1 go.opentelemetry.io/otel/propagation 1 opentelemetry-js-contrib 1 instrumentation-cassandra-driver 1 instrumentation-knex 1 instrumentation-mongoose 1 instrumentation-mysql 1 instrumentation-mysql2 1 instrumentation-oracledb 1 instrumentation-pg 1 instrumentation-tedious 1 OpenTelemetry.Exporter.Jaeger 1 opentelemetry-exporter-otlp-proto-http 1 github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver 1 opentelemetry-cpp 1 opentelemetry-ebpf-profiler 1

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Low 2.0

CVE-2026-81870

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, expo…

open-telemetry opentelemetry-go zot kubescape Debian Ubuntu Azure Linux Wolfi Go

Sep 16, 2026
Low 2.1

CVE-2026-45287

OpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parse

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17, `go.opentelemetry.io/otel/schema/v1.0` and `go.opentelemetry.io/otel/schema/v1.1` leaks one file descriptor on each successful `ParseFile` call. `ParseFile` opens the schema …

open-telemetry go.opentelemetry.io/otel/schema/v1.0 go.opentelemetry.io/otel/schema/v1.1 golang-opentelemetry-otel Debian Ubuntu Go

Jun 4, 2026
Low 3.8

CVE-2026-45683

OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Java TLS ioctl probe reads user-controlled ioctl pointers with bpf_probe_read instead of bpf_probe_read_user. An instrumented loc…

open-telemetry opentelemetry-ebpf-instrumentation go.opentelemetry.io/obi Go

Jun 2, 2026