opentelemetry-dotnet vulnerabilities

2 known vulnerabilities in opentelemetry-dotnet from Open-telemetry. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  opentelemetry-dotnet: Creation of Temporary File in Directory with Insecure Permissions

  CVE-2026-42191May 12, 2026Open-telemetry

  OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP (OpenTelemetry Protocol) exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath() when OTEL_DOTN

• 7.5 High severity

  opentelemetry-dotnet: Allocation of Resources Without Limits or Throttling

  CVE-2025-27513Mar 5, 2025Open-telemetry

  OpenTelemetry dotnet is a dotnet telemetry framework. A vulnerability in OpenTelemetry.Api package 1.10.0 to 1.11.1 could cause a Denial of Service (DoS) when a tracestate and traceparent header is received. Even if an application does not explicitly use trace