Vulnerabilities

TI-2026-33428 CVE-2026-45686 · GHSA-43g7-cwr8-q3jh

OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI

HIGH 72

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2026-06-02 Fixed in 0.9.0 CWE-190

TI-2026-33427 CVE-2026-45685 · GHSA-j8p6-96vp-f3r9

OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages

HIGH 72

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00463 Published 2026-06-02 Fixed in 0.9.0 CWE-20

TI-2026-33426 CVE-2026-45684 · GHSA-vvmg-8mjr-g6q3

OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers

MEDIUM 57

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00172 Published 2026-06-02 Fixed in 0.9.0 CWE-126

TI-2026-33425 CVE-2026-45683 · GHSA-fjq3-ffvr-vm46

OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure

MEDIUM 51

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.

CVSS 3.1LOW 3.8 Local Low privileges No interaction EPSS 0.00174 Published 2026-06-02 Fixed in 0.9.0 CWE-127

TI-2026-33423 CVE-2026-45681 · GHSA-r6c9-g6q5-qrf9

OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size

MEDIUM 60

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00287 Published 2026-06-02 Fixed in 0.9.0 CWE-125

TI-2026-33422 CVE-2026-45680 · GHSA-89c6-vpcj-7vj4

OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU

HIGH 66

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00319 Published 2026-06-02 Fixed in 0.9.0 CWE-400

TI-2026-33421 CVE-2026-45679 · GHSA-8rrq-wcg8-cv5q

OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages

HIGH 68

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00212 Published 2026-06-02 Fixed in 0.9.0 CWE-117

TI-2026-33420 CVE-2026-45678 · GHSA-pgvv-q3wf-mm9m

OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads

HIGH 72

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00342 Published 2026-06-02 Fixed in 0.9.0 CWE-20

TI-2026-33418 CVE-2026-45676 · GHSA-wp73-mwgf-4jq9

OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent

MEDIUM 58

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00162 Published 2026-06-02 Fixed in 0.9.0 CWE-20

TI-2026-33424 CVE-2026-45682 · GHSA-962q-hwm5-52x5

OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals

MEDIUM 58

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00162 Published 2026-06-02 Fixed in 0.9.0 CWE-401

Vulnerabilities

Filters