CVE-2026-45404
2 advisories.
Go/go.opentelemetry.io/otel/bridge/opentracing CVE-2026-45404: medium
OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access
Action: Upgrade go.opentelemetry.io/otel/bridge/opentracing to 1.45.0 or later.
go get go.opentelemetry.io/otel/bridge/opentracing@v1.45.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11.0 | 1.45.0 | - |
Fixed versions
| 1.45.0 |
Sources
- osv: GHSA-42cj-99w8-cp2p
- https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-42cj-99w8-cp2p
- https://github.com/open-telemetry/opentelemetry-go/pull/8693
- https://github.com/open-telemetry/opentelemetry-go/commit/93a693edeed0e07ce5ebd1dfe67af42d1e2055d8
- https://github.com/open-telemetry/opentelemetry-go
- https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.45.0
CVE-2026-45404 · published · modified · JSON
Go/go.opentelemetry.io/otel/bridge/opentracing CVE-2026-45404: unknown
OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access in go.opentelemetry.io/otel/bridge/opentracing
Action: Upgrade go.opentelemetry.io/otel/bridge/opentracing to 1.45.0 or later.
go get go.opentelemetry.io/otel/bridge/opentracing@v1.45.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11.0 | 1.45.0 | - |
Fixed versions
| 1.45.0 |
Sources
- osv: GO-2026-6258
- https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-42cj-99w8-cp2p
- https://github.com/open-telemetry/opentelemetry-go/commit/93a693edeed0e07ce5ebd1dfe67af42d1e2055d8
- https://github.com/open-telemetry/opentelemetry-go/pull/8693
- https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.45.0
CVE-2026-45404 · published · modified · JSON