Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
opentelemetry-collector-contrib-fips may allow security bypass
published 2 months ago
Summary
The opentelemetry-collector-contrib-fips component in version 0.159.0‑r1 has ten known security weaknesses that could let attackers interfere with data collection or gain unauthorized access. Updating to this version applies the necessary fixes and restores normal protection. Apply the update as soon as possible to keep your monitoring infrastructure safe.
What to do
- Update cleanstart opentelemetry-collector-contrib-fips to version 0.159.0-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | opentelemetry-collector-contrib-fips |
< 0.159.0-r1 Fix: upgrade to 0.159.0-r1
|
Original advisory text
Security fixes in opentelemetry-collector-contrib-fips 0.159.0-r1
Package opentelemetry-collector-contrib-fips version 0.159.0-r1 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...
Timeline
Published1 Sep 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-FB79569 · OSV
Track software like this
Free during beta