open-telemetry github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver vulnerabilities

Latest open-telemetry github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver CVEs

Newest publication first

1. CVE-2026-55701 OpenTelemetry githubreceiver silently ignores configured required_headers authentication

   Published 2026-09-15

   Medium·CVSS 6.9

   The OpenTelemetry Collector Contrib repository contains components for the OpenTelemetry Collector. Prior to 0.151.0, the githubreceiver validates the receiver/githubreceiver/config.go RequiredHeaders configuration at startup, but receiver/githubreceiver/trace_receiver.go handleR...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.