Go/go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho CVE-2023-45142: unknown, EPSS 1.61%
Memory exhaustion in go.opentelemetry.io/contrib/instrumentation
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GO-2023-2113#Go/go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
CVE-2023-45142 · published · modified · JSON