OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17, `go.opentelemetry.io/otel/schema/v1.0` and `go.opentelemetry.io/otel/schema/v1.1` leaks one file descriptor on each successful `ParseFile` call. `ParseFile` opens the schema file and passes it to `Parse` without closing it; repeated parsing in a long-running process can exhaust the process file descriptor limit and cause denial of service. Exploitation depends on a consuming application exposing repeated schema parsing to an attacker-controlled path. Version 0.0.17 contains a patch for the issue.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ebaf2bfd71 advisory.

    Update to 3.12.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dfc0e362e6 advisory.

    Update to 3.12.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-87b103f151 advisory.

    Update to 0.33.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1ad4561f49 advisory.

    Update to 0.33.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e6094447f0 advisory.

    Update to 0.19.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2290b9a9ad advisory.

    Update to 0.19.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f07b3548d4 advisory.

    Update to 2.94.0

    ----

    Update to 2.93.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17,     `go.opentelemetry.io/otel/schema/v1.0` and `go.opentelemetry.io/otel/schema/v1.1` leaks one file     descriptor on each successful `ParseFile` call. `ParseFile` opens the schema file and passes it to `Parse`     without closing it; repeated parsing in a long-running process can exhaust the process file descriptor     limit and cause denial of service. Exploitation depends on a consuming application exposing repeated     schema parsing to an attacker-controlled path. Version 0.0.17 contains a patch for the issue.
    (CVE-2026-45287)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
322124	Fedora 44 : prometheus (2026-ebaf2bfd71)	Nessus	Fedora Local Security Checks	low
322122	Fedora 43 : prometheus (2026-dfc0e362e6)	Nessus	Fedora Local Security Checks	low
321861	Fedora 44 : alertmanager (2026-87b103f151)	Nessus	Fedora Local Security Checks	low
321856	Fedora 43 : alertmanager (2026-1ad4561f49)	Nessus	Fedora Local Security Checks	low
321749	Fedora 43 : restic (2026-e6094447f0)	Nessus	Fedora Local Security Checks	critical
321671	Fedora 44 : restic (2026-2290b9a9ad)	Nessus	Fedora Local Security Checks	critical
321080	Fedora 44 : gh (2026-f07b3548d4)	Nessus	Fedora Local Security Checks	low
318809	Linux Distros Unpatched Vulnerability : CVE-2026-45287	Nessus	Misc.	low

Detections

Analytics

CVE-2026-45287

low

Tenable Plugins

low

low

low

low

critical

critical

low

low