go.opentelemetry.io/obi vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-45686Highgo.opentelemetry.io/obi: OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI CVE-2026-45685Highgo.opentelemetry.io/obi: OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages CVE-2026-45684Mediumgo.opentelemetry.io/obi: OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers CVE-2026-45682Mediumgo.opentelemetry.io/obi: OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals CVE-2026-45683Lowgo.opentelemetry.io/obi: OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure CVE-2026-45681Mediumgo.opentelemetry.io/obi: OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size CVE-2026-45680Mediumgo.opentelemetry.io/obi: OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU CVE-2026-45678Highgo.opentelemetry.io/obi: OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads CVE-2026-45679Mediumgo.opentelemetry.io/obi: OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages CVE-2026-45676Mediumgo.opentelemetry.io/obi: OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent CVE-2026-41433Highgo.opentelemetry.io/obi: OpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file…

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo