OP
Product
opentelemetry-collector-contrib
5
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add opentelemetry-collector-contrib to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42602 | 8.1 | May 13 | azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay Affected: >= 0.124.0, <= 0.150.0 |
| CVE-2026-55701 | 6.9 | Sep 15 | OpenTelemetry githubreceiver silently ignores configured required_headers authentication Affected: < 0.151.0 |
| CVE-2024-42368 | 6.5 | Aug 13 | open-telemetry has an Observable Timing Discrepancy Affected: >= 0.80.0, < 0.107.0 |
| CVE-2026-47256 | 5.3 | Sep 14 | OpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token Affected: < 0.154.0 |
| CVE-2024-45043 | 5.3 | Aug 28 | OpenTelemetry Collector AWS Firehose Receiver Authentication Bypass Vulnerability Affected: >= 0.49.0, < 0.108.0 |
Showing 5