opentelemetry-collector-contrib vulnerabilities
CVEs whose affected-version data names the opentelemetry-collector-contrib package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-55701Medium· 6.9The OpenTelemetry Collector Contrib repository contains components for the OpenTelemetry Collector
The OpenTelemetry Collector Contrib repository contains components for the OpenTelemetry Collector. Prior to 0.151.0, the githubreceiver validates the receiver/githubreceiver/config.go RequiredHeaders configuration at startup, but receiv…
▾ Sunlitopen-telemetry · opentelemetry-collector-contribEPSS 0.70%via NVD
CVE-2026-47256Medium· 5.3PoCOpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, and logs
OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, and logs. Prior to 0.154.0, the Sentry exporter r…
▾ Twilightopen-telemetry · opentelemetry-collector-contribEPSS 0.44%via NVD