{"action":"Upgrade go.opentelemetry.io/otel/schema/v1.0 to 0.0.17 or later.","affected":[{"fixed":"0.0.17","introduced":"0"}],"component":"go.opentelemetry.io/otel/schema/v1.0","cve_ids":["CVE-2026-45287"],"ecosystem":"Go","epss":0.00175,"exploited":false,"fixed_versions":["0.0.17"],"ghsa_id":"GHSA-995v-fvrw-c78m","id":"tcs_01M5KF56W0T8RHPA3P9VT72W2G","modified_at":"2026-07-15T22:00:51.114132588Z","published_at":"2026-05-28T17:19:10Z","references":["https://osv.dev/vulnerability/GHSA-995v-fvrw-c78m","https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-995v-fvrw-c78m","https://nvd.nist.gov/vuln/detail/CVE-2026-45287","https://github.com/open-telemetry/opentelemetry-go/commit/e72a235518cb773137efd80336a179028bc34684","https://github.com/open-telemetry/opentelemetry-go/commit/f12d198f161b61735d65705248715aa97021ba8d","https://github.com/open-telemetry/opentelemetry-go"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-995v-fvrw-c78m#Go/go.opentelemetry.io/otel/schema/v1.0","url":"https://osv.dev/vulnerability/GHSA-995v-fvrw-c78m"}],"summary":"opentelemetry-go's Schema ParseFile leaks file descriptors on each parse"}