CVE-2023-45142

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. A handler wrapper out of the box adds labels "http.useragent" and "http.method" that have unbound cardinality. It leads to the server's potential memory exhaustion when many malicious requests are sent to it...