[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-45681":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":33,"aliases":43,"duplicate_of":9,"upstream":46,"downstream":47,"duplicates":52,"related":53,"reserved_at":9,"published_at":56,"modified_at":57,"state":58,"summary":59,"references_raw":67,"kevs":95,"epss":96,"epss_history":99,"metrics":370,"affected":380},"CVE-2026-45681","OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the per-CPU message-buffer fallback path uses a 256-byte backup buffer but preserves the original payload size, which can be up to 8KB. If a CPU mismatch occurs, OBI can read beyond the fallback buffer and leak adjacent memory into telemetry. This issue has been patched in version 0.9.0.",null,[11,23],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],{"_key":24,"id":24,"name":25,"description":26,"type":15,"status":27,"abstraction":17,"likelihood_of_exploit":9,"capec":28},"CWE-130","Improper Handling of Length Parameter Inconsistency","The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.","Incomplete",[29],{"id":30,"name":31,"techniques":32},"CAPEC-47","Buffer Overflow via Parameter Expansion",[],[34],{"_key":35,"name":36,"source":37,"url":38,"maturity":39,"reliability_score":40,"verified":41,"type":9,"platforms":42,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_OPEN-TELEMETRY_OPENTELEMETRY-EBPF-INSTRUMENTATION","Opentelemetry Ebpf Instrumentation","github","https://github.com/open-telemetry/opentelemetry-ebpf-instrumentation/security/advisories/GHSA-8gmg-3w2q-65f4","poc",0.3,false,[],[44,45],"GHSA-r6c9-g6q5-qrf9","GO-2026-5610",[],[48,50],{"_key":49},"OPENSUSE-SU-2026:21483-1",{"_key":51},"OPENSUSE-SU-2026:11803-1",[],[54,55],{"_key":49},{"_key":51},"2026-06-02T15:25:00.260Z","2026-06-02T18:05:14.202Z","Analyzed",{"cisa_kev":41,"cisa_ransomware":41,"cisa_vendor":9,"epss_severity":60,"epss_score":61,"severity":62,"severity_score":63,"severity_version":64,"severity_source":65,"severity_vector":66,"severity_status":58},"low",0.00287,"medium",5.9,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",[68,79,84,91],{"url":69,"sources":70,"tags":73},"https://github.com/open-telemetry/opentelemetry-ebpf-instrumentation/security/advisories/GHSA-r6c9-g6q5-qrf9",[71,65,72],"osv_go","nvd",[74,75,76,77,78],"WEB","X Refsource CONFIRM","Exploit","Vendor Advisory","Advisory",{"url":80,"sources":81,"tags":82},"https://github.com/open-telemetry/opentelemetry-ebpf-instrumentation",[71],[83],"PACKAGE",{"url":85,"sources":86,"tags":87},"https://github.com/open-telemetry/opentelemetry-ebpf-instrumentation/releases/tag/v0.9.0",[65,72,71],[88,89,90,74],"X Refsource MISC","Product","Release Notes",{"url":92,"sources":93,"tags":94},"https://nvd.nist.gov/vuln/detail/CVE-2026-45681",[71],[78],[],{"date":97,"score":61,"percentile":98},"2026-09-19",0.2148,[100,104,107,110,113,116,120,123,126,129,132,135,138,142,145,148,151,154,157,160,163,166,169,172,175,178,181,184,187,190,193,195,198,201,204,207,210,213,216,219,222,225,228,231,234,237,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,341,344,347,350,353,356,358,361,364,367],{"date":101,"score":102,"percentile":103},"2026-06-03",0.00031,0.09277,{"date":105,"score":102,"percentile":106},"2026-06-04",0.0927,{"date":108,"score":102,"percentile":109},"2026-06-05",0.09313,{"date":111,"score":102,"percentile":112},"2026-06-06",0.09331,{"date":114,"score":102,"percentile":115},"2026-06-07",0.09315,{"date":117,"score":118,"percentile":119},"2026-06-08",0.0004,0.12521,{"date":121,"score":118,"percentile":122},"2026-06-09",0.1255,{"date":124,"score":118,"percentile":125},"2026-06-10",0.12599,{"date":127,"score":118,"percentile":128},"2026-06-11",0.12634,{"date":130,"score":118,"percentile":131},"2026-06-12",0.12725,{"date":133,"score":118,"percentile":134},"2026-06-13",0.12732,{"date":136,"score":118,"percentile":137},"2026-06-14",0.12711,{"date":139,"score":140,"percentile":141},"2026-06-15",0.00237,0.144,{"date":143,"score":140,"percentile":144},"2026-06-16",0.14422,{"date":146,"score":140,"percentile":147},"2026-06-17",0.14416,{"date":149,"score":140,"percentile":150},"2026-06-18",0.14424,{"date":152,"score":140,"percentile":153},"2026-06-19",0.14412,{"date":155,"score":140,"percentile":156},"2026-06-20",0.14404,{"date":158,"score":140,"percentile":159},"2026-06-21",0.14393,{"date":161,"score":140,"percentile":162},"2026-06-22",0.14381,{"date":164,"score":61,"percentile":165},"2026-06-23",0.20223,{"date":167,"score":61,"percentile":168},"2026-06-24",0.20252,{"date":170,"score":61,"percentile":171},"2026-06-25",0.20347,{"date":173,"score":61,"percentile":174},"2026-06-26",0.20382,{"date":176,"score":61,"percentile":177},"2026-06-27",0.20423,{"date":179,"score":61,"percentile":180},"2026-06-28",0.2039,{"date":182,"score":61,"percentile":183},"2026-06-29",0.20389,{"date":185,"score":61,"percentile":186},"2026-06-30",0.20378,{"date":188,"score":61,"percentile":189},"2026-07-01",0.2049,{"date":191,"score":61,"percentile":192},"2026-07-02",0.20488,{"date":194,"score":61,"percentile":192},"2026-07-03",{"date":196,"score":61,"percentile":197},"2026-07-04",0.205,{"date":199,"score":61,"percentile":200},"2026-07-05",0.20508,{"date":202,"score":61,"percentile":203},"2026-07-06",0.20522,{"date":205,"score":61,"percentile":206},"2026-07-07",0.20512,{"date":208,"score":61,"percentile":209},"2026-07-08",0.2051,{"date":211,"score":61,"percentile":212},"2026-07-09",0.2054,{"date":214,"score":61,"percentile":215},"2026-07-10",0.20551,{"date":217,"score":61,"percentile":218},"2026-07-11",0.20574,{"date":220,"score":61,"percentile":221},"2026-07-12",0.20568,{"date":223,"score":61,"percentile":224},"2026-07-13",0.20577,{"date":226,"score":61,"percentile":227},"2026-07-14",0.20599,{"date":229,"score":61,"percentile":230},"2026-07-15",0.20628,{"date":232,"score":61,"percentile":233},"2026-07-16",0.20656,{"date":235,"score":61,"percentile":236},"2026-07-17",0.20669,{"date":238,"score":61,"percentile":236},"2026-07-18",{"date":240,"score":61,"percentile":241},"2026-07-19",0.20665,{"date":243,"score":61,"percentile":244},"2026-07-20",0.20757,{"date":246,"score":61,"percentile":247},"2026-07-21",0.20759,{"date":249,"score":61,"percentile":250},"2026-07-22",0.20846,{"date":252,"score":61,"percentile":253},"2026-07-23",0.2083,{"date":255,"score":61,"percentile":256},"2026-07-24",0.2084,{"date":258,"score":61,"percentile":259},"2026-07-25",0.20917,{"date":261,"score":61,"percentile":262},"2026-07-26",0.2091,{"date":264,"score":61,"percentile":265},"2026-07-27",0.20886,{"date":267,"score":61,"percentile":268},"2026-07-28",0.20948,{"date":270,"score":61,"percentile":271},"2026-07-29",0.20939,{"date":273,"score":61,"percentile":274},"2026-07-30",0.2096,{"date":276,"score":61,"percentile":277},"2026-07-31",0.20974,{"date":279,"score":61,"percentile":280},"2026-08-01",0.20975,{"date":282,"score":61,"percentile":283},"2026-08-02",0.20976,{"date":285,"score":61,"percentile":286},"2026-08-03",0.20991,{"date":288,"score":61,"percentile":289},"2026-08-04",0.20936,{"date":291,"score":61,"percentile":292},"2026-08-05",0.20855,{"date":294,"score":61,"percentile":295},"2026-08-06",0.20865,{"date":297,"score":61,"percentile":298},"2026-08-07",0.20879,{"date":300,"score":61,"percentile":301},"2026-08-08",0.20883,{"date":303,"score":61,"percentile":304},"2026-08-09",0.20877,{"date":306,"score":61,"percentile":307},"2026-08-10",0.20889,{"date":309,"score":61,"percentile":310},"2026-08-11",0.20984,{"date":312,"score":61,"percentile":313},"2026-08-12",0.21029,{"date":315,"score":61,"percentile":316},"2026-08-13",0.21052,{"date":318,"score":61,"percentile":319},"2026-08-14",0.21075,{"date":321,"score":61,"percentile":322},"2026-08-15",0.21229,{"date":324,"score":61,"percentile":325},"2026-08-16",0.21251,{"date":327,"score":61,"percentile":328},"2026-08-17",0.2117,{"date":330,"score":61,"percentile":331},"2026-08-18",0.21188,{"date":333,"score":61,"percentile":334},"2026-08-19",0.21267,{"date":336,"score":61,"percentile":337},"2026-08-20",0.21306,{"date":339,"score":61,"percentile":340},"2026-08-21",0.21332,{"date":342,"score":61,"percentile":343},"2026-08-22",0.21339,{"date":345,"score":61,"percentile":346},"2026-08-23",0.21319,{"date":348,"score":61,"percentile":349},"2026-08-24",0.20634,{"date":351,"score":61,"percentile":352},"2026-08-25",0.20651,{"date":354,"score":61,"percentile":355},"2026-08-26",0.20717,{"date":357,"score":61,"percentile":355},"2026-08-27",{"date":359,"score":61,"percentile":360},"2026-08-28",0.20739,{"date":362,"score":61,"percentile":363},"2026-08-29",0.20756,{"date":365,"score":61,"percentile":366},"2026-08-30",0.20788,{"date":368,"score":61,"percentile":369},"2026-08-31",0.20773,[371,375,378],{"source":71,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":372,"cvss_v4_0":9},{"baseScore":63,"baseSeverity":9,"vectorString":66,"impactScore":373,"exploitabilityScore":374},6,5.6,{"source":65,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":376,"cvss_v4_0":9},{"baseScore":63,"baseSeverity":377,"vectorString":66,"impactScore":373,"exploitabilityScore":374},"MEDIUM",{"source":72,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":379,"cvss_v4_0":9},{"baseScore":63,"baseSeverity":377,"vectorString":66,"impactScore":373,"exploitabilityScore":374},[381,394,401],{"ecosystem":382,"name":383,"vendor":384,"product":385,"cpe_part":9,"purl_type":386,"purl_namespace":384,"purl_name":385,"source":9,"versions":387},"Go","go.opentelemetry.io/obi","go.opentelemetry.io","obi","golang",[388],{"version":389,"is_range":390,"range_type":391,"version_start":9,"version_start_type":9,"version_end":392,"version_end_type":393,"fixed_in":9},"lt0_9_0",true,"semver","0.9.0","excluding",{"ecosystem":9,"name":395,"vendor":396,"product":395,"cpe_part":397,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":398},"opentelemetry-ebpf-instrumentation","open-telemetry","a",[399],{"version":400,"is_range":390,"range_type":65,"version_start":9,"version_start_type":9,"version_end":392,"version_end_type":393,"fixed_in":9},"\u003C 0.9.0",{"ecosystem":9,"name":402,"vendor":403,"product":404,"cpe_part":397,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":405},"ebpf instrumentation","opentelemetry","ebpf_instrumentation",[406],{"version":407,"is_range":390,"range_type":408,"version_start":9,"version_start_type":9,"version_end":392,"version_end_type":393,"fixed_in":9},"lt0.9.0","cpe"]