{"action":"Upgrade opentelemetry-instrumentation to 0.41b0 or later.","affected":[{"fixed":"0.41b0","introduced":"0"}],"component":"opentelemetry-instrumentation","cve_ids":["CVE-2023-43810"],"ecosystem":"PyPI","epss":0.00845,"exploited":false,"fixed_versions":["0.41b0"],"ghsa_id":"GHSA-5rv5-6h4r-h22v","id":"tcs_01M5KGVF7HQZXG0V21H7N28EJ6","modified_at":"2026-07-07T17:46:23.923569649Z","published_at":"2026-07-07T11:45:25.310552Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1752","https://github.com/open-telemetry/opentelemetry-python-contrib/security/advisories/GHSA-5rv5-6h4r-h22v","https://nvd.nist.gov/vuln/detail/CVE-2023-43810","https://github.com/open-telemetry/opentelemetry-python-contrib/commit/6007e0c013071e7f8b9612d3bc68aeb9d600d74e","https://github.com/open-telemetry/opentelemetry-python-contrib","https://github.com/open-telemetry/opentelemetry-python-contrib/releases/tag/v0.41b0","https://pypi.org/project/opentelemetry-instrumentation","https://github.com/advisories/GHSA-5rv5-6h4r-h22v"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-1752","url":"https://osv.dev/vulnerability/PYSEC-2026-1752"}],"summary":"opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics"}