HIGH7.5Go
GHSA-mh2q-q3fh-2475· CVE-2026-29181, GO-2026-5506OpenTelemetry-Go: multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)
Modified: 9/10/2026
package
pkg:go/go.opentelemetry.io/otel
OpenTelemetry-Go: multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)
Modified: 9/10/2026
Opentelemetry-go's baggage parsing no longer caps raw header length in go.opentelemetry.io/otel
Modified: 7/27/2026
OpenTelemetry-Go: Multi-value baggage header extraction causes excessive allocations in go.opentelemetry.io/otel
Modified: 8/6/2026