Allocation of Resources Without Limits or Throttling

Overview OpenTelemetry.Api is a package that application developers and library authors use to instrument their application/library. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper handling of tracestate and traceparent...

CVE-2025-27513: Allocation of Resources Without Limits or Throttling

OpenTelemetry dotnet is a dotnet telemetry framework. A vulnerability in OpenTelemetry.Api package 1.10.0 to 1.11.1 could cause a Denial of Service DoS when a tracestate and traceparent header is received. Even if an application does not explicitly use trace context propagation, receiving these...