Product by Open-telemetry
Opentelemetry-go
9 known vulnerabilities in Opentelemetry-go (Open-telemetry), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-29181 | Opentelemetry-go: Allocation of Resources Without Limits or Throttling | 7.5 | |
| Medium | CVE-2026-81872 | OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full | — | |
| Medium | CVE-2026-81871 | OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning | — | |
| High | CVE-2026-39883 | Opentelemetry-go: Untrusted Search Path | 7.0 | |
| Medium | CVE-2026-45404 | OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access | — | |
| Medium | CVE-2026-81869 | OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation | — | |
| High | CVE-2026-24051 | OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking | 7.0 | |
| Medium | CVE-2026-39882 | OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies | 5.3 | |
| Low | CVE-2026-81870 | OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs | — |