CVE-2023-43810
2 advisories.
PyPI/opentelemetry-instrumentation CVE-2023-43810: high 7.5, EPSS 0.84%
opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
Action: Upgrade opentelemetry-instrumentation to 0.41b0 or later.
pip install opentelemetry-instrumentation==0.41b0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.41b0 | - |
Fixed versions
| 0.41b0 |
Sources
- osv: GHSA-5rv5-6h4r-h22v
- https://github.com/open-telemetry/opentelemetry-python-contrib/security/advisories/GHSA-5rv5-6h4r-h22v
- https://nvd.nist.gov/vuln/detail/CVE-2023-43810
- https://github.com/open-telemetry/opentelemetry-python-contrib/commit/6007e0c013071e7f8b9612d3bc68aeb9d600d74e
- https://github.com/open-telemetry/opentelemetry-python-contrib
- https://github.com/open-telemetry/opentelemetry-python-contrib/releases/tag/v0.41b0
CVE-2023-43810 · published · modified · JSON
PyPI/opentelemetry-instrumentation CVE-2023-43810: high 7.5, EPSS 0.84%
opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
Action: Upgrade opentelemetry-instrumentation to 0.41b0 or later.
pip install opentelemetry-instrumentation==0.41b0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.41b0 | - |
Fixed versions
| 0.41b0 |
Sources
- osv: PYSEC-2026-1752
- https://github.com/open-telemetry/opentelemetry-python-contrib/security/advisories/GHSA-5rv5-6h4r-h22v
- https://nvd.nist.gov/vuln/detail/CVE-2023-43810
- https://github.com/open-telemetry/opentelemetry-python-contrib/commit/6007e0c013071e7f8b9612d3bc68aeb9d600d74e
- https://github.com/open-telemetry/opentelemetry-python-contrib
- https://github.com/open-telemetry/opentelemetry-python-contrib/releases/tag/v0.41b0
- https://pypi.org/project/opentelemetry-instrumentation
- https://github.com/advisories/GHSA-5rv5-6h4r-h22v
CVE-2023-43810 · published · modified · JSON