There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage:
    header extraction parses each header field-value independently and aggregates members across values. This
    allows an attacker to amplify cpu and allocations by sending many baggage: header lines, even when each
    individual value is within the 8192-byte per-value parse limit. This vulnerability is fixed in 1.41.0.
    (CVE-2026-29181)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - OpenTelemetry-Go 是 OpenTelemetry 的 Go 实现。从 1.36.0 变为 1.40.0的多值托运行错
    标头提取独立解析每个标头 field-value 并聚合跨值成员。这使得攻击者能够通过发送大量 Baggage: 标头行来放大 cpu 和 分配即使每个单独的值都在每个值 8192 字节的解析限制内。此漏洞已在 1.41.0 中修复。
    (CVE-2026-29181)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - OpenTelemetry-Go 是 OpenTelemetry 的 Go 實作。從 1.36.0 到 1.40.0多重價值包
    標頭擷取會獨立剖析每個標頭欄位值並彙總各值的成員。這會允許攻擊者透過傳送許多 Baggage: 標頭行放大 cpu 和配置即使每個個別值都在 8192 位元組每個值剖析限制內。此弱點已在 1.41.0 中修正。
    (CVE-2026-29181)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - OpenTelemetry-Go は OpenTelemetry の Go 実装です。 1.36.0 から 1.40.0まで、複数値のバケット
    ヘッダー抽出は、各ヘッダーフィールド値を個別に解析し、複数の値にまたがるメンバーを集約します。これにより、個々の値が 8192 バイトごとの解析制限内にある場合でも、攻撃者が多数のバケットヘッダーラインを送信することで、cpu と割り当てを増幅させることが可能です。この脆弱性は 1.41.0 で修正されています。
    (CVE-2026-29181)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage:
    header extraction parses each header field-value independently and aggregates members across values. This     allows an attacker to amplify cpu and allocations by sending many baggage: header lines, even when each     individual value is within the 8192-byte per-value parse limit. This vulnerability is fixed in 1.41.0.
    (CVE-2026-29181)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the docker package has been released.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2493-1 advisory.

    - Security: re-vendor Go dependencies to address CVEs tracked against       containerized-data-importer (backport of upstream PR #4110, post-v1.65.0).
      Fixed by this update:
      * google.golang.org/grpc 1.65.0 -> 1.79.3:
        bsc#1260295 (CVE-2026-33186)
      * golang.org/x/net 0.33.0 -> 0.48.0:
        bsc#1238699 (CVE-2025-22870), bsc#1241838 (CVE-2025-22872),         bsc#1251495 (CVE-2025-47911), bsc#1251689 (CVE-2025-58190)
      * golang.org/x/crypto 0.31.0 -> 0.46.0:
        CVE-2025-22869, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181         (no separate CDI bug filed)
      * go.opentelemetry.io/otel 1.28.0 -> 1.41.0:
        CVE-2026-29181 (otel is pulled in transitively at 1.39.0 by the grpc         bump; pinned to 1.41.0 so the update does not introduce it)
    - Record CVEs already fixed by the x/net release vendored in 1.64.0       (x/net 0.33.0), not previously noted in the changelog:
      bsc#1236523 (CVE-2023-45288), bsc#1230323 (CVE-2023-39325)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
440019	SCA: security update for go.opentelemetry.io/otel/baggage, go.opentelemetry.io/otel/propagation (GHSA-mh2q-q3fh-2475)	Tenable Self-Hosted Container Security	SCA Checks	2026/4/8	2026/7/2	high
440019	SCA: security update for go.opentelemetry.io/otel/baggage, go.opentelemetry.io/otel/propagation (GHSA-mh2q-q3fh-2475)	Tenable Cloud Security	SCA Checks	2026/4/8	2026/7/2	high
305795	Linux Distros 未修补的漏洞：CVE-2026-29181	Nessus	Misc.	2026/4/9	2026/5/29	high
305795	Linux Distros 未修補的弱點：CVE-2026-29181	Nessus	Misc.	2026/4/9	2026/5/29	high
305795	Linux Distros のパッチ未適用の脆弱性: CVE-2026-29181	Nessus	Misc.	2026/4/9	2026/5/29	high
305795	Linux Distros Unpatched Vulnerability : CVE-2026-29181	Nessus	Misc.	2026/4/9	2026/5/29	high
333641	Photon OS 5.0: Docker PHSA-2026-5.0-91-0869	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/8/10	high
322917	SUSE SLES15 Security Update : containerized-data-importer (SUSE-SU-2026:2493-1)	Nessus	SuSE Local Security Checks	2026/6/26	2026/6/26	medium
322364	Photon OS 5.0: Docker PHSA-2026-5.0-0869	Nessus	PhotonOS Local Security Checks	2026/6/24	2026/6/24	high

检测

插件搜索

high

high

high

high

high

high

high

medium

high