CVE-2026-126360 OpenTelemetry Python: Denial of service through quadratic-time traceparent parsing in opentelemetry-api

The opentelemetry-api component in OpenTelemetry Python (prior to version 1.45.2 ) is vulnerable to a Denial of Service (DoS) via quadratic-time regular-expression backtracking. The issue occurs within TraceContextTextMapPropagator.extract() when processing a malformed traceparent value containin...