Lucene search
+L

2 matches found

PyPA
PyPA
added 2026/07/07 11:45 a.m.11 views

opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics

SummaryAutoinstrumentation out of the box adds the label httpmethod that has unbound cardinality. It leads to the server's potential memory exhaustion when many malicious requests are sent. DetailsHTTP method for requests can be easily set by an attacker to be random and long. PoCSend many reques...

7.5CVSS7AI score0.00685EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder