opentelemetry-dotnet-contrib

6 results · Feed

• High 7.0
  CVE-2026-81192

  OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

  `OpenTelemetry.Resources.Host` NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the `host.id` resource attribute detector launches the `sh`…

  open-telemetry opentelemetry-dotnet-contrib OpenTelemetry.Resources.Host NuGet
  Sep 8, 2026
• Medium 6.5
  CVE-2026-44213

  OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured

  The OpenTelemetry.Exporter.Instana exports telemetry to Instana backend. Prior to 1.1.0, the OpenTelemetry.Exporter.Instana NuGet package does not validate HTTPS/TLS certificates are valid when sending telemetry to a configured Instana back-end when a proxy i…

  open-telemetry opentelemetry-dotnet-contrib OpenTelemetry.Exporter.Instana NuGet
  May 26, 2026
• Medium 5.9
  CVE-2026-42348

  OpAMP client reads unbounded HTTP response bodies

  OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HTTP, the OpAMP client allocates an unbounded buffer to read all bytes from the server, with no upper-bound on t…

  open-telemetry opentelemetry-dotnet-contrib OpenTelemetry.OpAmp.Client NuGet
  May 12, 2026
• Medium 5.3
  CVE-2026-41484

  OpenTelemetry.Exporter.OneCollector vulnerable to denial of service via unbounded HTTP error response body

  OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP. In versions 1.15.0 and earlier, when a request to the configured back-end or collector results in an unsuccessful HTTP 4xx or 5xx response, the H…

  open-telemetry opentelemetry-dotnet-contrib OpenTelemetry.Exporter.OneCollector NuGet
  May 6, 2026
• Medium 5.9
  CVE-2026-41483

  Unbounded HTTP response body read in OpenTelemetry.Resources.Azure

  OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments. In versions 1.15.0-beta.1 and earlier, the AzureVmMetaDataRequestor class makes HTTP requests to the Azure VM instance metadata service and reads the response body into memory…

  open-telemetry opentelemetry-dotnet-contrib OpenTelemetry.Resources.Azure NuGet
  May 6, 2026
• Medium 5.9
  CVE-2026-41173

  Unbounded HTTP response body read in OpenTelemetry.Sampler.AWS

  The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray. Prior to 0.1.0-alpha.8, OpenTelemetry.Sampler.AWS reads unbounded HTTP response bodies from a configured AWS X-Ray remote sampling endpoint into memo…

  open-telemetry opentelemetry-dotnet-contrib OpenTelemetry.Resources.AWS OpenTelemetry.Sampler.AWS NuGet
  Apr 23, 2026