Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

opentelemetry-dotnet — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in opentelemetry-dotnet, with AI-generated Chinese analysis, references, and POCs.

Vendor: open-telemetry

CVE IDTitleCVSSSeverityPublished
CVE-2026-41078 OpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path CWE-770 5.9 Medium2026-04-23
CVE-2026-40894 OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers CWE-789 5.3 Medium2026-04-23
CVE-2026-40891 OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling CWE-789 5.3 Medium2026-04-23
CVE-2026-40182 OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies CWE-789 5.3 Medium2026-04-23
CVE-2025-27513 OpenTelemetry .NET has a Denial of Service (DoS) Vulnerability in API Package CWE-770 7.5 High2025-03-05
CVE-2024-32028 Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore CWE-212 4.1 Medium2024-04-12

All 6 known CVE vulnerabilities affecting opentelemetry-dotnet with full Chinese analysis, references, and POCs where available.