https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T04:39:41.541449+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cleanstart-2026-ah42066 Withdrawn: CLEANSTART-2026-AH42066 — Security fixes in zot 2.1.13-r2 2026-10-25T04:39:41.577525+00:00

Withdrawn by the publisher.

Affected: CleanStart: zot

Package zot version 2.1.13-r2 fixes 29 vulnerabilities: CVE-2021-41190, CVE-2026-33814, ghsa-pjcq-xvwq-hhpj, ghsa-f2g3-hh2r-cwgc, CVE-2026-39820...

 https://db.gcve.eu/vuln/cve-2026-39882 CVE-2026-39882 — OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies 2026-10-25T04:39:41.577625+00:00

Affected: open-telemetry opentelemetry-go

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the configured collector endpoint is attacker-controlled (or a network attacker can mitm the exporter connection). This vulnerability is fixed in 1.43.0.