open-telemetry/opentelemetry-collector-contrib Security Advisories | GitStock

medium2026-06-18

opentelemetry-collector-contrib: githubreceiver silently ignores configured required_headers authentication

GHSA-w5cv-pw74-4rxc · CVE-2026-55701

medium2026-06-18

opentelemetry-collector-contrib sentryexporter: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token

GHSA-4jvg-4jfx-fmhc · CVE-2026-47256

high2026-05-06

opentelemetry-collector-contrib's azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay

GHSA-pjv4-3c63-699f · CVE-2026-42602

medium2024-08-29

OpenTelemetry Collector module AWS Firehose Receiver Authentication Bypass Vulnerability

GHSA-prf6-xjxh-p698 · CVE-2024-45043

medium2024-08-13

open-telemetry has an Observable Timing Discrepancy

GHSA-rfxf-mf63-cpqv · CVE-2024-42368