40 matches found
opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing
Summary OpenTelemetry Java's W3C trace-context propagator permits excessive CPU consumption when extracting crafted tracestate headers, potentially leading to denial of service. Regex backtracking causes quadratic parsing time for headers containing long runs of spaces or tabs without a following...
5.3CVSS5.8AI score
SaveExploits0References6Affected Software1
20