Product by Open-telemetry
Opentelemetry-dotnet
8 known vulnerabilities in Opentelemetry-dotnet (Open-telemetry), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-27513 | OpenTelemetry .NET has a Denial of Service (DoS) Vulnerability in API Package | 7.5 | |
| High | CVE-2026-42191 | Opentelemetry-dotnet: Creation of Temporary File in Directory with Insecure Permissions | 7.8 | |
| Medium | CVE-2026-40894 | OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers | 5.3 | |
| Medium | CVE-2026-40182 | OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies | 5.9 | |
| Medium | CVE-2026-41310 | OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth | 5.3 | |
| Medium | CVE-2026-41078 | OpenTelemetry.Exporter.Jaeger: Allocation of Resources Without Limits or Throttling | 5.9 | |
| Medium | CVE-2026-40891 | OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling | 5.3 | |
| Medium | CVE-2024-32028 | Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore | 4.1 |