Red Hat Hardened Images/opentelemetry-collector
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| OpenTelemetry-Go: Eager W3C baggage-property materialization causes bounded memory-allocation amplification | go.opentelemetry.io/otel/baggagego.opentelemetry.io/otel/propagation | GoRed Hat | Medium | Fix reported | |
| opentelemetry-go: AttributeValueLengthLimit is fully bypassed by attribute values composed of valid U+FFFD runes | go.opentelemetry.io/otel/sdk/loggo.opentelemetry.io/otel/sdk | GoRed Hat | Medium | Fix reported | |
| React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass) | react-routerCryostat 4/cryostat-openshift-console-plugin-npm | npmRed Hat | Medium | Fix reported | |
| PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset | postcssCryostat 4/cryostat-openshift-console-plugin-npm | npmRed Hat | Medium | Fix reported |