OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17, `go.opentelemetry.io/otel/schema/v1.0` and `go.opentelemetry.io/otel/schema/v1.1` leaks one file descriptor on each successful `ParseFile` call. `ParseFile` opens the schema file and passes it to `Parse` without closing it; repeated parsing in a long-running process can exhaust the process file descriptor limit and cause denial of service. Exploitation depends on a consuming application exposing repeated schema parsing to an attacker-controlled path. Version 0.0.17 contains a patch for the issue.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a5e27945f7 advisory.

    Update to 2.112.0.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5b642da12e advisory.

    Update to 4.2.2

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f366154bec advisory.

    release 1.21.2

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1842aaea5d advisory.

    release 1.11.3

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d5c6299162 advisory.

    release 1.11.3

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a96d4ee174 advisory.

    release 1.21.2

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e1d1b349cd advisory.

    Update to 1.74.3

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6145ae14ca advisory.

    Update to 1.74.3

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3c6643b33a advisory.

    release 1.21.1

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c55ec73fe2 advisory.

    release 1.11.2

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ac94948c8a advisory.

    release 1.11.2

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-460749ef95 advisory.

    release 1.21.1

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ebaf2bfd71 advisory.

    Update to 3.12.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dfc0e362e6 advisory.

    Update to 3.12.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-87b103f151 advisory.

    Update to 0.33.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1ad4561f49 advisory.

    Update to 0.33.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e6094447f0 advisory.

    Update to 0.19.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2290b9a9ad advisory.

    Update to 0.19.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f07b3548d4 advisory.

    Update to 2.94.0

    ----

    Update to 2.93.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17,     `go.opentelemetry.io/otel/schema/v1.0` and `go.opentelemetry.io/otel/schema/v1.1` leaks one file     descriptor on each successful `ParseFile` call. `ParseFile` opens the schema file and passes it to `Parse`     without closing it; repeated parsing in a long-running process can exhaust the process file descriptor     limit and cause denial of service. Exploitation depends on a consuming application exposing repeated     schema parsing to an attacker-controlled path. Version 0.0.17 contains a patch for the issue.
    (CVE-2026-45287)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17,
    `go.opentelemetry.io/otel/schema/v1.0` and `go.opentelemetry.io/otel/schema/v1.1` leaks one file
    descriptor on each successful `ParseFile` call. `ParseFile` opens the schema file and passes it to `Parse`
    without closing it; repeated parsing in a long-running process can exhaust the process file descriptor
    limit and cause denial of service. Exploitation depends on a consuming application exposing repeated
    schema parsing to an attacker-controlled path. Version 0.0.17 contains a patch for the issue.
    (CVE-2026-45287)

ID	Name	Product	Family	Severity
326362	Fedora 44 : jfrog-cli (2026-a5e27945f7)	Nessus	Fedora Local Security Checks	high
325606	Fedora 44 : helm (2026-5b642da12e)	Nessus	Fedora Local Security Checks	high
325319	Fedora 44 : prometheus-podman-exporter (2026-f366154bec)	Nessus	Fedora Local Security Checks	low
325318	Fedora 43 : podman-tui (2026-1842aaea5d)	Nessus	Fedora Local Security Checks	low
325317	Fedora 44 : podman-tui (2026-d5c6299162)	Nessus	Fedora Local Security Checks	low
325315	Fedora 43 : prometheus-podman-exporter (2026-a96d4ee174)	Nessus	Fedora Local Security Checks	low
324626	Fedora 43 : rclone (2026-e1d1b349cd)	Nessus	Fedora Local Security Checks	low
324615	Fedora 44 : rclone (2026-6145ae14ca)	Nessus	Fedora Local Security Checks	low
323627	Fedora 44 : prometheus-podman-exporter (2026-3c6643b33a)	Nessus	Fedora Local Security Checks	low
323615	Fedora 44 : podman-tui (2026-c55ec73fe2)	Nessus	Fedora Local Security Checks	low
323613	Fedora 43 : podman-tui (2026-ac94948c8a)	Nessus	Fedora Local Security Checks	low
323611	Fedora 43 : prometheus-podman-exporter (2026-460749ef95)	Nessus	Fedora Local Security Checks	low
322124	Fedora 44 : prometheus (2026-ebaf2bfd71)	Nessus	Fedora Local Security Checks	low
322122	Fedora 43 : prometheus (2026-dfc0e362e6)	Nessus	Fedora Local Security Checks	low
321861	Fedora 44 : alertmanager (2026-87b103f151)	Nessus	Fedora Local Security Checks	low
321856	Fedora 43 : alertmanager (2026-1ad4561f49)	Nessus	Fedora Local Security Checks	low
321749	Fedora 43 : restic (2026-e6094447f0)	Nessus	Fedora Local Security Checks	critical
321671	Fedora 44 : restic (2026-2290b9a9ad)	Nessus	Fedora Local Security Checks	critical
321080	Fedora 44 : gh (2026-f07b3548d4)	Nessus	Fedora Local Security Checks	low
318809	Linux Distros Unpatched Vulnerability : CVE-2026-45287	Nessus	Misc.	low
442438	SCA: security update for go.opentelemetry.io/otel/schema/v1.0, go.opentelemetry.io/otel/schema/v1.1 (GHSA-995v-fvrw-c78m)	Tenable Cloud Security	SCA Checks	low
442438	SCA: security update for go.opentelemetry.io/otel/schema/v1.0, go.opentelemetry.io/otel/schema/v1.1 (GHSA-995v-fvrw-c78m)	Tenable Self-Hosted Container Security	SCA Checks	low

Detections

Analytics

CVE-2026-45287

low

Tenable Plugins

high

high

low

low

low

low

low

low

low

low

low

low

low

low

low

low

critical

critical

low

low

low

low