Vulnerability GO-2026-6616
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
6 hours ago
October 01, 2026 at 08:24 PM UTC
OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation in go.opentelemetry.io/otel/sdk
v1.10.0 - v1.32.0
v1.10.0 - v1.32.0
Summary
OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation in go.opentelemetry.io/otel/sdk
Details
OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation in go.opentelemetry.io/otel/sdk
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
6 hours ago
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace
v1.5.0 - v1.44.0 GO-2026-6505
v1.5.0 - v1.44.0 GO-2026-6505
Medium Risk
2 days ago
OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation
v1.10.0 - v1.32.0 GHSA-p9f8-wvj8-2fg8
v1.10.0 - v1.32.0 GHSA-p9f8-wvj8-2fg8
Low Risk
14 days ago
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
v1.5.0 - v1.44.0 GHSA-8wmf-6v46-5gfg
v1.5.0 - v1.44.0 GHSA-8wmf-6v46-5gfg
Unknown
2 months ago
Opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking in go.opentelemetry.io/otel/sdk
v1.15.0 - v1.42.0 GO-2026-5426
v1.15.0 - v1.42.0 GO-2026-5426
High Risk
5 months ago
opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking
v1.15.0 - v1.42.0 GHSA-hfvc-g4fc-pqhx
v1.15.0 - v1.42.0 GHSA-hfvc-g4fc-pqhx
Impacted packages
Timeline
Published
6 hours ago
October 01, 2026 at 08:24 PM UTC
Last Modified
6 hours ago
October 01, 2026 at 08:45 PM UTC