opentelemetry-dotnet-contrib vulnerabilities

2 known vulnerabilities in opentelemetry-dotnet-contrib from Open-telemetry. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  opentelemetry-dotnet-contrib: Untrusted Search Path

  CVE-2026-81192Sep 8, 2026Open-telemetry

  `OpenTelemetry.Resources.Host` NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the `host.id` resource attribute detector launches the `sh`

• 7.5 High severity

  opentelemetry-dotnet-contrib: Memory Allocation with Excessive Size Value

  CVE-2026-42348May 12, 2026Open-telemetry

  OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HTTP, the OpAMP client allocates an unbounded buffer to read all bytes from the server, with no upper-bound on th