OP
Product
opentelemetry-dotnet
8
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 6Low 0
Watch
Add opentelemetry-dotnet to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41078 | 5.9 | Apr 23 | OpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path Affected: <= 1.6.0-rc.1 |
| CVE-2026-40182 | 5.9 | Apr 23 | OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies Affected: >= 1.13.1, < 1.15.2 |
| CVE-2026-41310 | 5.3 | May 6 | OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth Affected: <= 1.15.2 |
| CVE-2026-40894 | 5.3 | Apr 23 | OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers Affected: >= 0.5.0-beta.2, < 1.15.3 |
| CVE-2026-40891 | 5.3 | Apr 23 | OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling Affected: >= 1.13.1, < 1.15.3 |
| CVE-2024-32028 | 4.1 | Apr 12 | Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore Affected: < 1.8.1 |
Showing 6