CVE-2026-39882MediumCVSS 5.3

OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies

Published
June 2, 2026
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2026-39882 →

🎯 Affected products25

  • azl3 azurelinux-image-tools 1.2.0-2 on Azure Linux 3.0
  • azl3 containerd2 2.0.0-18 on Azure Linux 3.0
  • azl3 containerd2 2.1.6-1 on Azure Linux 3.0
  • azl3 containerd2 2.1.6-2 on Azure Linux 3.0
  • azl3 containerd2 2.2.4-2 on Azure Linux 3.0
  • azl3 docker-buildx 0.14.0-10 on Azure Linux 3.0
  • azl3 docker-buildx 0.14.0-11 on Azure Linux 3.0
  • azl3 docker-compose 2.27.0-8 on Azure Linux 3.0
  • azl3 docker-compose 2.27.0-9 on Azure Linux 3.0
  • azl3 moby-containerd-cc 1.7.7-10 on Azure Linux 3.0
  • azl3 moby-containerd-cc 1.7.7-11 on Azure Linux 3.0
  • azl3 moby-engine 25.0.3-15 on Azure Linux 3.0
  • azl3 moby-engine 25.0.3-17 on Azure Linux 3.0
  • cbl2 moby-buildx 0.7.1-28 on CBL Mariner 2.0
  • cbl2 moby-buildx 0.7.1-28 on CBL-Mariner 2.0
  • cbl2 moby-compose 2.17.3-14 on CBL Mariner 2.0
  • cbl2 moby-compose 2.17.3-14 on CBL-Mariner 2.0
  • cbl2 moby-containerd 1.6.26-13 on CBL Mariner 2.0
  • cbl2 moby-containerd 1.6.26-13 on CBL-Mariner 2.0
  • cbl2 moby-containerd-cc 1.7.7-13 on CBL Mariner 2.0
  • cbl2 moby-containerd-cc 1.7.7-13 on CBL-Mariner 2.0
  • cbl2 moby-engine 24.0.9-19 on CBL Mariner 2.0
  • cbl2 moby-engine 24.0.9-19 on CBL-Mariner 2.0
  • cbl2 prometheus 2.37.9-7 on CBL Mariner 2.0
  • cbl2 prometheus 2.37.9-7 on CBL-Mariner 2.0

✅ Remediation

KBCBL-Mariner Releases (Security Update) — fixed build 0.14.0-11 KBCBL-Mariner Releases (Security Update) — fixed build 2.27.0-9 KBCBL-Mariner Releases (Security Update) — fixed build 1.7.7-11 KBCBL-Mariner Releases (Security Update) — fixed build 25.0.3-17 KBRelease Notes (Security Update) KBCBL-Mariner Releases (Security Update) — fixed build 1.3.0-1 KBCBL-Mariner Releases (Security Update) — fixed build 25.0.3-16 KBCBL-Mariner Releases (Security Update) — fixed build 2.1.6-3 KBCBL-Mariner Releases (Security Update) — fixed build 2.2.4-2

🔗 References (2)