HIGH7.5Go
GHSA-5r5m-65gx-7vrh· CVE-2023-25151, GO-2023-1546otelhttp and otelbeego have DoS vulnerability for high cardinality metrics
Modified: 2/4/2026
package
Go/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
pkg:go/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
HIGH7.5Go
GHSA-rcjv-mgp8-qvmr· CVE-2023-45142, GO-2023-2113OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics
Modified: 9/10/2026
—Go
GO-2023-1546· CVE-2023-25151, GHSA-5r5m-65gx-7vrhDenial of service in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
Modified: 2/4/2026
—Go
GO-2023-2113· CVE-2023-45142, GHSA-rcjv-mgp8-qvmrMemory exhaustion in go.opentelemetry.io/contrib/instrumentation
Modified: 2/4/2026