open-telemetry opentelemetry-collector-contrib

• CVE-2026-55701 Medium 6.9 OpenTelemetry githubreceiver silently ignores configured required_headers authentication 0.7%
• CVE-2026-47256 Medium 5.3 OpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token 0.4%
• CVE-2026-42602 High 8.1 azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay 0.2%
• CVE-2024-45043 Medium 5.3 OpenTelemetry Collector AWS Firehose Receiver Authentication Bypass Vulnerability 0.5%
• CVE-2024-42368 Medium 6.5 open-telemetry has an Observable Timing Discrepancy 0.6%