Lucene search
+L

39 matches found

Github Security Blog
Github Security Blog
•added 2026/10/28 9:07 p.m.•4 views

opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing

Summary OpenTelemetry Java's W3C trace-context propagator permits excessive CPU consumption when extracting crafted tracestate headers, potentially leading to denial of service. Regex backtracking causes quadratic parsing time for headers containing long runs of spaces or tabs without a following...

5.3CVSS5.9AI score
SaveExploits0References6Affected Software1
Rows per page
Query Builder