OC
Product
Opentelemetry Collector Contrib
by Opentelemetry · last CVE May 13, 2026
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch

Add Opentelemetry Collector Contrib to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42602
8.1
0%
May 13
azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay
Affected: 0.124.0 through 0.150.0
CVE-2024-42368
6.5
1%
Aug 13
open-telemetry has an Observable Timing Discrepancy
Affected: 0.80.0 before 0.107.0
CVE-2024-45043
5.3
0%
Aug 28
OpenTelemetry Collector AWS Firehose Receiver Authentication Bypass Vulnerability
Affected: 0.49.0 before 0.108.0
Showing 3