OpenTelemetry 厂商漏洞列表 / CVE 中文分析 1

Critical 2026-10-18

C 语言 strcpy 缓冲区溢出漏洞分析与 PoC 代码

Medium GHSA-2j6h-2m66-jm2q 2026-10-03

OpenTelemetry多个instrumentation包默认泄露数据库用户名

Medium GHSA-w3qp-cm8f-6c5x 2026-09-17

OpenTelemetry OTLP gRPC Exporter 忽略环境变量 TLS 证书绕过 mTLS

Medium 2026-09-17

OpenTelemetry Go gRPC导出器并发Panic漏洞分析

Unknown 2026-09-17

OpenTelemetry 属性截断导致多字节 UTF-8 字符损坏修复

Medium CVE-2026-82889 2026-09-17

OpenTelemetry Go 库 CVE-2026-82889：UTF-8 替换字符绕过属性截断（CWE-176/400）

Medium CVE-2026-EIR2 2026-09-17

OpenTelemetry-Go BatchProcessor 忙等待DoS漏洞分析(CVE-2026-EIR2)

Medium 2026-09-17

OpenTelemetry Go SDK 敏感信息泄露修复 (PR#8438)

Medium 2026-09-17

OpenTelemetry OTLP/Zipkin Exporter 敏感凭据日志泄露修复分析

Medium 2026-09-17

OpenTelemetry Go 信息泄露：Exporter 配置日志暴露端点 URL

Medium CVE-2026-5671 2026-09-16

CVE-2026-5671：OTel githubreceiver 忽略 required_headers 认证

Unknown 2026-09-16

GitHub接收器required_headers校验缺失修复及POC

High CVE-2025-47256 2026-09-15

OpenTelemetry Sentry Exporter路径穿越漏洞（CVE-2025-47256）

High CVE-2026-4701 2026-09-15

CVE-2026-4701: OpenTelemetry Operator 任意文件读取漏洞

Unknown 2026-09-15

OpenTelemetry Operator v0.152.0 安全漏洞修复与缓解分析

Medium 2026-09-12

OpenTelemetry eBPF Profiler 路径遍历漏洞及 openat2 修复

Medium CVE-2024-45404 2026-08-25

OpenTelemetry Go并发映射竞态条件导致DoS漏洞

Medium GHSA-w9wp-h8bw-79x 2026-07-18

OpenTelemetry SDK 无界内存分配漏洞 (CVE-2026-48504)

Medium 2026-07-18

OpenTelemetry Rust BaggagePropagator W3C Baggage限制绕过漏洞分析

Unknown 2026-07-09

Jaeger Propagator 解析畸形百分号编码头导致异常漏洞修复