HIGH7.7Go
GHSA-cxh2-4639-vmc5· CVE-2026-47701, GO-2026-5339OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth
Modified: 9/10/2026
package
Go/github.com/open-telemetry/opentelemetry-operator
pkg:go/github.com/open-telemetry/opentelemetry-operator
—Go
GO-2026-5339· CVE-2026-47701, GHSA-cxh2-4639-vmc5OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth in github.com/open-telemetry/opentelemetry-operator
Modified: 6/25/2026