otlp http

  1. CVE-2026-39882: OTLP HTTP Telemetry DoS Fix (4 MiB Limit)

    Microsoft’s Security Update Guide entry for CVE-2026-39882, published after the OpenTelemetry-Go advisory in April 2026, flags a denial-of-service flaw in the Go OTLP HTTP exporters that can let a malicious or intercepted collector response exhaust memory in instrumented applications. The bug is...