open-telemetry opentelemetry-dotnet

• CVE-2026-42191 Medium 6.5 OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter 0.1%
• CVE-2026-41310 Medium 5.3 OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth 0.3%
• CVE-2026-41078 Medium 5.9 OpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path 0.2%
• CVE-2026-40894 Medium 5.3 OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers 0.5%
• CVE-2026-40891 Medium 5.3 OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling 0.2%
• CVE-2026-40182 Medium 5.3 OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies 0.3%
• CVE-2025-27513 High 7.5 OpenTelemetry .NET has a Denial of Service (DoS) Vulnerability in API Package 0.5%
• CVE-2024-32028 Medium 4.1 Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore 0.3%