1. SumoLogic Collector v0.108.0-1649 Exposes Windows Containers to Multiple Critical Vulnerabilities
A standard installation of the SumoLogic OpenTelemetry Collector version 0.108.0-1649 in a Windows container introduces multiple, documented security vulnerabilities. A user report on GitHub, accompanied by a Trivy scan, reveals the collector package pulls in dependencies with at least four specific CVEs, including CVE...