GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
7 advisories
OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access
Moderate
CVE-2026-45404
was published
for
go.opentelemetry.io/otel/bridge/opentracing
(Go)
Aug 20, 2026
OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers
Moderate
CVE-2026-45684
was published
for
go.opentelemetry.io/obi
(Go)
May 18, 2026
OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals
Moderate
CVE-2026-45682
was published
for
go.opentelemetry.io/obi
(Go)
May 18, 2026
OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size
Moderate
CVE-2026-45681
was published
for
go.opentelemetry.io/obi
(Go)
May 18, 2026
OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU
Moderate
CVE-2026-45680
was published
for
go.opentelemetry.io/obi
(Go)
May 18, 2026
OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages
Moderate
CVE-2026-45679
was published
for
go.opentelemetry.io/obi
(Go)
May 18, 2026
OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent
Moderate
CVE-2026-45676
was published
for
go.opentelemetry.io/obi
(Go)
May 18, 2026
ProTip!
Advisories are also available from the
GraphQL API