HIGH7.5Go
GHSA-rcjv-mgp8-qvmr· CVE-2023-45142, GO-2023-2113OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics
Modified: 9/10/2026
package
Go/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
pkg:go/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
—Go
GO-2023-2113· CVE-2023-45142, GHSA-rcjv-mgp8-qvmrMemory exhaustion in go.opentelemetry.io/contrib/instrumentation
Modified: 2/4/2026