Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/08 7:22 p.m.46 views

opentelemetry-go: OTLP HTTP exporters read unbounded HTTP response bodies

overview: this report shows that the otlp HTTP exporters traces/metrics/logs read the full HTTP response body into an in-memory bytes.Buffer without a size cap. this is exploitable for memory exhaustion when the configured collector endpoint is attacker-controlled or a network attacker can mitm t...

5.3CVSS6AI score0.0019EPSS
SaveExploits0References5Affected Software3
Rows per page
Query Builder