Product by Go
Go.opentelemetry.io/obi
11 known vulnerabilities in Go.opentelemetry.io/obi (Go), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-45685 | OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages | 7.5 | |
| High | CVE-2026-45686 | OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI | 7.5 | |
| High | CVE-2026-45678 | OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads | 7.5 | |
| High | CVE-2026-41433 | Opentelemetry-ebpf-instrumentation: Path Traversal | 8.4 | |
| High | CVE-2026-45680 | OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU | 5.9 | |
| Medium | CVE-2026-45679 | OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages | 6.5 | |
| Medium | CVE-2026-45681 | OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size | 5.9 | |
| Medium | CVE-2026-45676 | OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent | 5.5 | |
| Medium | CVE-2026-45682 | OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals | 5.1 | |
| Medium | CVE-2026-45684 | OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers | 4.9 | |
| Low | CVE-2026-45683 | OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure | 3.8 |