https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T03:59:05.234098+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-45678 CVE-2026-45678 — OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads 2026-10-07T03:59:05.253442+00:00

Affected: open-telemetry opentelemetry-ebpf-instrumentation

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol parser assumes BIND message payloads contain a valid NUL-terminated portal name. A crafted empty or unterminated payload can make OBI slice beyond the end of the captured buffer and panic. This issue has been patched in version 0.9.0.