CVE-2026-47256

2 advisories.

Go/github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter CVE-2026-47256: medium 5.3, EPSS 0.44%

opentelemetry-collector-contrib sentryexporter: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token

Action: Upgrade github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter to 0.154.0 or later.

go get github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter@v0.154.0

Affected

introduced	fixed	last affected
0	0.154.0	-

Fixed versions

0.154.0

Sources

CVE-2026-47256 · published 2026-06-18T15:04:10Z · modified 2026-06-25T18:56:10.457988644Z · JSON

Go/github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter CVE-2026-47256: unknown, EPSS 0.44%

opentelemetry-collector-contrib sentryexporter: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token in github.com/

Action: Upgrade github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter to 0.154.0 or later.

go get github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter@v0.154.0

Affected

introduced	fixed	last affected
0	0.154.0	-

Fixed versions

0.154.0

Sources

CVE-2026-47256 · published 2026-06-25T18:26:48Z · modified 2026-06-25T18:45:23.703516791Z · JSON