CVE-2026-114603

A flaw was found in opentelemetry-api. An unauthenticated remote attacker can cause a Denial of Service DoS by sending an HTTP request with a malformed tracing header containing an excessively long sequence of whitespace characters. Because the header parsing logic uses an inefficient regular...