Go/go.opentelemetry.io/otel/schema/v1.0 CVE-2026-45287: low, EPSS 0.18%

opentelemetry-go's Schema ParseFile leaks file descriptors on each parse

Action: Upgrade go.opentelemetry.io/otel/schema/v1.0 to 0.0.17 or later.

go get go.opentelemetry.io/otel/schema/v1.0@v0.0.17

Affected

Fixed versions

Sources

• osv: GHSA-995v-fvrw-c78m#Go/go.opentelemetry.io/otel/schema/v1.0
• https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-995v-fvrw-c78m
• https://nvd.nist.gov/vuln/detail/CVE-2026-45287
• https://github.com/open-telemetry/opentelemetry-go/commit/e72a235518cb773137efd80336a179028bc34684
• https://github.com/open-telemetry/opentelemetry-go/commit/f12d198f161b61735d65705248715aa97021ba8d
• https://github.com/open-telemetry/opentelemetry-go

CVE-2026-45287 · published 2026-05-28T17:19:10Z · modified 2026-07-15T22:00:51.114132588Z · JSON