Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry to a back-end/collector over gRPC or HTTP using OpenTelemetry Protocol format (OTLP), if the request results in a unsuccessful request (i.e. HTTP 4xx or 5xx), the response is read into memory with no upper-bound on the number of bytes consumed. This could cause memory exhaustion in the consuming application if the configured back-end/collector endpoint is attacker-controlled (or a network attacker can MitM the connection) and an extremely large body is returned by the response. This vulnerability is fixed in 1.15.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-23 | 1 | Disclosure1 |
| 2026-04-24 | 1 | Disclosure1 |
| 2026-04-28 | 1 | Disclosure1 |
| 2026-04-29 | 1 | General1 |
🟠 OpenTelemetry-dotnet OTLP Exporter, Unbounded Memory Allocation, #CVE-2026-40182 (Medium) https://dailycve.com/opentelemetry-dotnet-otlp-exporter-unbounded-memory-allocation-cve-2026-40182-medium/
Post summary
The post highlights CVE-2026-40182 as an unbounded memory allocation issue in OpenTelemetry-dotnet OTLP Exporter with medium severity, without further details on PoC, exploitation, or remediation.
CVE-2026-40182: CVE-2026-40182: Unbounded Memory Exhaustion Denial of Service in OpenTelemetry .NET OTLP Exporter The opentelemetry-dotnet framework versions 1.13.1 through 1.15.1 contain an uncontrolled resource consumption vulnerability in the OpenT... https://cvereports.com/reports/CVE-2026-40182
Post summary
The brief report highlights a memory exhaustion denial‑of‑service vulnerability in OpenTelemetry .NET OTLP Exporter versions 1.13.1 to 1.15.1, without providing PoC, exploitation, or patch details.
🟠 OpenTelemetry NET OTLP Exporter, Unbounded Memory Allocation, #CVE-2026-40182 (Medium) https://dailycve.com/opentelemetry-net-otlp-exporter-unbounded-memory-allocation-cve-2026-40182-medium/
Post summary
This snippet announces CVE-2026-40182, a medium‑severity unbounded memory allocation vulnerability in the OpenTelemetry NET OTLP Exporter, with no evidence of exploitation, PoC, or patch details provided.
CVE-2026-40182 OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry to a back-end/collector over gRPC or HTTP using OpenTelem… https://www.cve.org/CVERecord?id=CVE-2026-40182
Post summary
The described CVE addresses a flaw in OpenTelemetry .NET versions 1.13.1 through before 1.15.2 when exporting telemetry over gRPC or HTTP, though no PoC, exploit, or patch details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | opentelemetry | opentelemetry | - | .net | - |