opentelemetry-dotnet

7 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-42191

  OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter

  OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP (OpenTelemetry Protocol) exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath() when OTEL_DOT…

  open-telemetry opentelemetry-dotnet promitor OpenTelemetry.Exporter.OpenTelemetryProtocol Wolfi NuGet
  May 12, 2026
• Medium 5.3
  CVE-2026-41310

  OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth

  OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zi…

  open-telemetry opentelemetry-dotnet OpenTelemetry.Exporter.Zipkin NuGet
  May 6, 2026
• Medium 5.9
  CVE-2026-41078

  OpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path

  OpenTelemetry dotnet is a dotnet telemetry framework. In 1.6.0-rc.1 and earlier, OpenTelemetry.Exporter.Jaeger may allow sustained memory pressure when the internal pooled-list sizing grows based on a large observed span/tag set and that enlarged size is reus…

  open-telemetry opentelemetry-dotnet OpenTelemetry.Exporter.Jaeger OpenTelemetry.Exporter.Jaeger NuGet
  Apr 23, 2026
• Medium 5.3
  CVE-2026-40894

  OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers

  OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1.15.2, The implementation details of the baggage, B3 and Jaeger processing code in the OpenTelemetry.Api and O…

  open-telemetry opentelemetry-dotnet OpenTelemetry.Extensions.Propagators OpenTelemetry.Api Wolfi NuGet
  Apr 23, 2026
• Medium 5.3
  CVE-2026-40891

  OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling

  OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protocol (OTLP), the exporter may parse a server-provided grpc-status-details-bin trailer during retry handling. Pri…

  open-telemetry opentelemetry-dotnet OpenTelemetry.Exporter.OpenTelemetryProtocol OpenTelemetry.Exporter.OpenTelemetryProtocol Wolfi NuGet
  Apr 23, 2026
• Medium 5.3
  CVE-2026-40182

  OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies

  OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry to a back-end/collector over gRPC or HTTP using OpenTelemetry Protocol format (OTLP), if the request results in a unsuccessful request (i.e. HTTP 4xx …

  open-telemetry opentelemetry-dotnet OpenTelemetry.Exporter.OpenTelemetryProtocol NuGet
  Apr 23, 2026
• Medium 4.1
  CVE-2024-32028

  Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore

  OpenTelemetry dotnet is a dotnet telemetry framework. In affected versions of `OpenTelemetry.Instrumentation.Http` and `OpenTelemetry.Instrumentation.AspNetCore` the `url.full` writes attribute/tag on spans (`Activity`) when tracing is enabled for outgoing ht…

  open-telemetry opentelemetry-dotnet OpenTelemetry.Instrumentation.Http OpenTelemetry.Instrumentation.AspNetCore NuGet
  Apr 12, 2024