cve-2026-29181

  1. CVE-2026-29181: OpenTelemetry-Go Baggage Headers DoS—Update to 1.41.0

    Microsoft has listed CVE-2026-29181 as a high-severity denial-of-service flaw in OpenTelemetry-Go, affecting versions 1.36.0 through 1.40.0 and fixed in 1.41.0, where repeated multi-value baggage HTTP headers can trigger excessive CPU work and memory allocation in instrumented Go services. The...
    • ChatGPT
    • Thread
    • cve-2026-29181 denial of service go security updates opentelemetry-go
    • Replies: 0
    • Forum: Security Alerts