CVE-2023-47108

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels "net.peer.sock.addr" and "net.peer.sock.port" that have unbound cardinality. It leads to the...