{"action":"Upgrade go.opentelemetry.io/ebpf-profiler to 0.0.202622 or later.","affected":[{"fixed":"0.0.202622","introduced":"0.0.202527"}],"component":"go.opentelemetry.io/ebpf-profiler","cve_ids":["CVE-2026-48496"],"ecosystem":"Go","epss":0.00137,"exploited":false,"fixed_versions":["0.0.202622"],"ghsa_id":"GHSA-f2r5-5m7w-p5cx","id":"tcs_01M5KF85VY5TZRHB6YZW90P1KG","modified_at":"2026-09-10T03:50:49.236007900Z","published_at":"2026-06-23T22:16:14Z","references":["https://osv.dev/vulnerability/GHSA-f2r5-5m7w-p5cx","https://github.com/open-telemetry/opentelemetry-ebpf-profiler/security/advisories/GHSA-f2r5-5m7w-p5cx","https://github.com/open-telemetry/opentelemetry-ebpf-profiler/commit/234b685cab31c2cb2f79e966caeab168bcc489e4","https://github.com/open-telemetry/opentelemetry-ebpf-profiler","https://github.com/open-telemetry/opentelemetry-ebpf-profiler/releases/tag/v0.0.202622"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"GHSA-f2r5-5m7w-p5cx","url":"https://osv.dev/vulnerability/GHSA-f2r5-5m7w-p5cx"}],"summary":"opentelemetry-ebpf-profiler: Unprivileged process can trigger a denial of service on the ebpf-profiler agent"}