CVE-2026-48504
1 advisory.
crates.io/opentelemetry_sdk CVE-2026-48504: medium 5.3, EPSS 0.42%
opentelemetry_sdk has unbounded memory allocation in W3C Baggage propagation
Action: Upgrade opentelemetry_sdk to 0.32.1 or later.
cargo update -p opentelemetry_sdk --precise 0.32.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.32.1 | - |
Fixed versions
| 0.32.1 |
Sources
- osv: GHSA-w9wp-h8wv-79jx
- https://github.com/open-telemetry/opentelemetry-rust/security/advisories/GHSA-w9wp-h8wv-79jx
- https://github.com/open-telemetry/opentelemetry-rust
CVE-2026-48504 · published · modified · JSON