{"action":"Upgrade @opentelemetry/instrumentation to 0.41.2 or later.","affected":[{"fixed":"0.41.2","introduced":"0.40.0"}],"component":"@opentelemetry/instrumentation","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.41.2"],"ghsa_id":"GHSA-f8pq-3926-8gx5","id":"tcs_01M5KFN1R8MHFJB5A4WD8A8F1N","modified_at":"2023-08-09T20:59:14Z","published_at":"2023-08-09T20:59:14Z","references":["https://osv.dev/vulnerability/GHSA-f8pq-3926-8gx5","https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-f8pq-3926-8gx5","https://github.com/open-telemetry/opentelemetry-js/commit/ffe641c08c69f41ca8d292221dc1804d511efb28","https://github.com/open-telemetry/opentelemetry-js"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-f8pq-3926-8gx5","url":"https://osv.dev/vulnerability/GHSA-f8pq-3926-8gx5"}],"summary":"Unsanitized user controlled input in module generation"}