OC
Product
Opentelemetry Collector Contrib
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Opentelemetry Collector Contrib to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42602 | 8.1 | May 13 | azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay Affected: 0.124.0 through 0.150.0 |
| CVE-2024-42368 | 6.5 | Aug 13 | open-telemetry has an Observable Timing Discrepancy Affected: 0.80.0 before 0.107.0 |
| CVE-2024-45043 | 5.3 | Aug 28 | OpenTelemetry Collector AWS Firehose Receiver Authentication Bypass Vulnerability Affected: 0.49.0 before 0.108.0 |
Showing 3
