opentelemetry-go

The opentelemetry-go tag covers discussions about the Go implementation of OpenTelemetry, an observability framework for traces, metrics, and logs. Recent content highlights two high-severity denial-of-service vulnerabilities: CVE-2026-39882, which involves OTLP HTTP telemetry exporters that can exhaust memory from malicious collector responses, and CVE-2026-29181, which exploits repeated multi-value baggage HTTP headers to cause excessive CPU and memory usage. Both issues affect instrumented Go services and are relevant to Windows environments running cloud-native or Kubernetes workloads. The tag emphasizes the importance of updating to patched versions and maintaining observability hygiene to prevent telemetry systems from becoming attack vectors.