CVE-2026-44163
1 advisory.
RubyGems/fluent-plugin-opentelemetry CVE-2026-44163: medium 5.3, EPSS 0.42%
fluent-plugin-opentelemetry Has Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`
Action: Upgrade fluent-plugin-opentelemetry to 0.5.3 or later.
bundle update fluent-plugin-opentelemetryAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.3 | - |
Fixed versions
| 0.5.3 |
Sources
- osv: GHSA-2jc5-xhx8-qj6h
- https://github.com/fluent-plugins-nursery/fluent-plugin-opentelemetry/security/advisories/GHSA-2jc5-xhx8-qj6h
- https://github.com/fluent-plugins-nursery/fluent-plugin-opentelemetry/commit/ce6c1f2a7741592c8a79afbe75fded9e8ebfa92d
- https://github.com/fluent-plugins-nursery/fluent-plugin-opentelemetry
CVE-2026-44163 · published · modified · JSON