Vulnerabilities

Last updated 3 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
go.opentelemetry.io/otel/sdk/log OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full Medium Risk 6.0 1 day ago 1 day ago
go.opentelemetry.io/otel/sdk OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation Medium Risk 6.0 1 day ago 1 day ago
go.opentelemetry.io/otel/sdk OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs Low Risk 3.0 13 days ago 13 days ago
go.opentelemetry.io/otel/sdk opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking High Risk 8.0 5 months ago 20 days ago
go.opentelemetry.io/otel/sdk OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking High Risk 7.0 8 months ago 20 days ago
go.opentelemetry.io/otel/sdk Opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking in go.opentelemetry.io/otel/sdk Unknown 2 months ago 2 months ago
go.opentelemetry.io/otel/sdk OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking in go.opentelemetry.io/otel/sdk Unknown 7 months ago 7 months ago