open-telemetry opentelemetry-dotnet-contrib

• CVE-2026-81192 High 7.0 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS 0.2%
• CVE-2026-44213 Medium 6.5 OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured 0.2%
• CVE-2026-42348 Medium 5.9 OpAMP client reads unbounded HTTP response bodies 0.3%
• CVE-2026-41484 Medium 5.3 OpenTelemetry.Exporter.OneCollector vulnerable to denial of service via unbounded HTTP error response body 0.3%
• CVE-2026-41483 Medium 5.9 Unbounded HTTP response body read in OpenTelemetry.Resources.Azure 0.3%
• CVE-2026-41173 Medium 5.9 Unbounded HTTP response body read in OpenTelemetry.Sampler.AWS 0.3%