MEDIUM6.5NuGet
GHSA-4625-4j76-fww9· CVE-2026-42191OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter
Modified: 9/10/2026
package
NuGet/OpenTelemetry.Exporter.OpenTelemetryProtocol
pkg:nuget/OpenTelemetry.Exporter.OpenTelemetryProtocol
MEDIUM5.3NuGet
GHSA-mr8r-92fq-pj8p· CVE-2026-40891OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling
Modified: 9/10/2026
MEDIUM5.3NuGet
GHSA-q834-8qmm-v933· CVE-2026-40182OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies
Modified: 9/10/2026