{"action":"Upgrade go.opentelemetry.io/ebpf-profiler to 0.0.202622 or later.","affected":[{"fixed":"0.0.202622","introduced":"0.0.202527"}],"component":"go.opentelemetry.io/ebpf-profiler","cve_ids":["CVE-2026-48496"],"ecosystem":"Go","epss":0.00137,"exploited":false,"fixed_versions":["0.0.202622"],"ghsa_id":"GHSA-f2r5-5m7w-p5cx","id":"tcs_01M5KGKMV86F3H9XRYRFZEWRC2","modified_at":"2026-06-28T06:29:19.328604951Z","published_at":"2026-06-25T18:43:19Z","references":["https://osv.dev/vulnerability/GO-2026-5343","https://github.com/open-telemetry/opentelemetry-ebpf-profiler/security/advisories/GHSA-f2r5-5m7w-p5cx","https://github.com/open-telemetry/opentelemetry-ebpf-profiler/commit/234b685cab31c2cb2f79e966caeab168bcc489e4","https://github.com/open-telemetry/opentelemetry-ebpf-profiler/releases/tag/v0.0.202622"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-5343","url":"https://osv.dev/vulnerability/GO-2026-5343"}],"summary":"opentelemetry-ebpf-profiler: Unprivileged process can trigger a denial of service on the ebpf-profiler agent in go.opentelemetry.io/ebpf-profiler"}