5.3
Moyenne
CVE-2026-40894 OpenTelemetry dotnet is a dotnet telemetry framework
Description
OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1.15.2, The implementation details of the baggage, B3 and Jaeger processing code in the OpenTelemetry.Api and OpenTelemetry.Extensions.Propagators NuGet packages can allocate excessive memory when parsing which could create a potential denial of service (DoS) in the consuming application. This vulnerability is fixed in 1.15.3.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| opentelemetry-dotnet 0.5 | 0.5.0-beta.2 → < 1.15.3 | 1.15.3 |
| OpenTelemetry.Api 0.5 | 0.5.0-beta.2 → < 1.15.3 | 1.15.3 |
| OpenTelemetry.Extensions.Propagators 1.3 | 1.3.1 → < 1.15.3 | 1.15.3 |
Autres CVE de opentelemetry-dotnet
Les 8 CVE de opentelemetry-dotnet →
CVE-2026-42191
OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP (OpenTelemetry Protocol) exporter implementation
6.5
Moyenne
CVE-2026-41310
OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry
5.3
Moyenne
CVE-2026-41078
OpenTelemetry dotnet is a dotnet telemetry framework
5.9
Moyenne
CVE-2026-40891
OpenTelemetry dotnet is a dotnet telemetry framework
5.3
Moyenne