Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/28 5:4 p.m.18 views

opentelemetry-go's baggage parsing no longer caps raw header length

Summary https://github.com/open-telemetry/opentelemetry-go/pull/7880 removed raw-length rejection and it causes Parse to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via oversized inputs. Details The commit removes the upfront baggage-string length check and the...

5.3CVSS5.9AI score0.00237EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder