Collection of CVEs for Protobuf Sub-dependency

[joshstatham]

CVE Records

https://www.cve.org/CVERecord?id=CVE-2026-44289
https://www.cve.org/CVERecord?id=CVE-2026-44291
https://www.cve.org/CVERecord?id=CVE-2026-44293
https://www.cve.org/CVERecord?id=CVE-2026-44295

Introduced Through:

applicationinsights@3.15.0 › @opentelemetry/exporter-logs-otlp-http@0.217.0 › @opentelemetry/otlp-exporter-base@0.217.0 › @opentelemetry/otlp-transformer@0.217.0 › protobufjs@8.0.1

Remedy

protobufjs sub-dependency must be >= 7.5.6 || >= 8.0.2

[JacksonWeber]

These should be resolved as of #1504