CVE-2026-45292

CVE-2026-45292 affects opentelemetry-java’s baggage propagation path (opentelemetry-api and opentelemetry-extension-trace-propagators). Before 1.62.0, the baggage parser could allocate unbounded memory and incur CPU consumption when parsing oversized baggage, and baggage entries are re-injected i...