Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/OpenTelemetry.Exporter.Instana@1.0.6
purl pkg:nuget/OpenTelemetry.Exporter.Instana@1.0.6
Next non-vulnerable version 1.1.0
Latest non-vulnerable version 1.1.0
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-1e7j-qm1r-kffw
Aliases:
CVE-2026-44213
GHSA-wfr5-454p-mjc2
The OpenTelemetry.Exporter.Instana exports telemetry to Instana backend. Prior to 1.1.0, the OpenTelemetry.Exporter.Instana NuGet package does not validate HTTPS/TLS certificates are valid when sending telemetry to a configured Instana back-end when a proxy is configured using the INSTANA_ENDPOINT_PROXY environment variable. If a network attacker can Man-in-the-Middle (MitM) the proxy connection, all OpenTelemetry telemetry data and the Instana API key are exposed to the attacker. This vulnerability is fixed in 1.1.0.
1.1.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T22:23:56.826616+00:00 GitLab Importer Affected by VCID-1e7j-qm1r-kffw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/OpenTelemetry.Exporter.Instana/CVE-2026-44213.yml 38.6.0