Go/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace CVE-2023-45142: unknown
Memory exhaustion in go.opentelemetry.io/contrib/instrumentation
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GO-2023-2113#Go/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
CVE-2023-45142 · published · modified · JSON