Skip to main content
cve.nowby Sazabi
← Go
GoPackage

go.opentelemetry.io/otel/sdk

4 known vulnerabilities (2 high, 1 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 high, 1 medium, 1 low
Registry
pkg.go.dev

Advisories 4

  • CVE-2026-81869Medium 5.1

    OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation

    Affected: from 1.10.0, fixed in 1.33.0.

  • OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

    Affected: from 1.5.0, fixed in 1.45.0.

  • OpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijacking

    Affected: from 1.15.0, fixed in 1.43.0.

  • OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking

    Affected: from 1.21.0, fixed in 1.40.0.