Product by Opentelemetry
OpenTelemetry
14 known vulnerabilities in OpenTelemetry (Opentelemetry), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-47108 | DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics | 7.5 | |
| High | CVE-2023-45142 | OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics | 7.5 | |
| High | CVE-2026-29181 | Opentelemetry-go: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2023-43810 | opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics | 7.5 | |
| Medium | CVE-2026-40894 | OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers | 5.3 | |
| Medium | CVE-2026-54285 | opentelemetry-js: Unbounded memory allocation in W3C Baggage propagation | 5.3 | |
| High | CVE-2026-39883 | Opentelemetry-go: Untrusted Search Path | 7.0 | |
| Medium | CVE-2026-41178 | OpenTelemetry-Go's baggage parsing no longer caps raw header length | 5.3 | |
| Medium | CVE-2026-40182 | OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies | 5.9 | |
| High | CVE-2026-24051 | OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking | 7.0 | |
| Medium | CVE-2026-41078 | OpenTelemetry.Exporter.Jaeger: Allocation of Resources Without Limits or Throttling | 5.9 | |
| Medium | CVE-2026-44967 | opentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response | 5.3 | |
| Medium | CVE-2026-40891 | OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling | 5.3 | |
| Medium | CVE-2026-39882 | OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies | 5.3 |