{"action":"Upgrade OpenTelemetry.Instrumentation.Http to 1.8.1 or later.","affected":[{"fixed":"1.8.1","introduced":"0"}],"component":"OpenTelemetry.Instrumentation.Http","cve_ids":["CVE-2024-32028"],"ecosystem":"NuGet","epss":0.00291,"exploited":false,"fixed_versions":["1.8.1"],"ghsa_id":"GHSA-vh2m-22xx-q94f","id":"tcs_01M5N91X071ZNPDZ7FCSTACQ7W","modified_at":"2026-09-10T03:50:00.510168843Z","published_at":"2024-04-12T22:54:09Z","references":["https://osv.dev/vulnerability/GHSA-vh2m-22xx-q94f","https://github.com/open-telemetry/opentelemetry-dotnet/security/advisories/GHSA-vh2m-22xx-q94f","https://nvd.nist.gov/vuln/detail/CVE-2024-32028","https://github.com/open-telemetry/opentelemetry-dotnet/commit/e222ecb5942d4ce1cadfd4306c39e3f4933a5c42","https://github.com/open-telemetry/opentelemetry-dotnet","https://github.com/open-telemetry/semantic-conventions/blob/main/docs/http/http-spans.md"],"severity":{"label":"medium","score":4.1},"sources":[{"source":"osv","source_id":"GHSA-vh2m-22xx-q94f","url":"https://osv.dev/vulnerability/GHSA-vh2m-22xx-q94f"}],"summary":"Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore"}