Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/10/05 10:52 p.m.•37 views

Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute

Impact Multiple @opentelemetry/instrumentation- packages recorded the database connection username as the db.user span attribute on every instrumented database operation. This attribute was emitted unconditionally — it was not gated by enhancedDatabaseReporting or any other opt-in flag, and it wa...

5.8CVSS5.8AI score0.00244EPSS
SaveExploits0References6Affected Software8
Rows per page
Query Builder