GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
2 advisories
opentelemetry-go: OTLP HTTP exporters read unbounded HTTP response bodies
Moderate
CVE-2026-39882
was published
for
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp
(Go)
Apr 8, 2026
opentelemetry-go's baggage parsing no longer caps raw header length
Moderate
CVE-2026-41178
was published
for
go.opentelemetry.io/otel/baggage
(Go)
May 28, 2026
ProTip!
Advisories are also available from the
GraphQL API