GO-2026-5506
- Source
- https://pkg.go.dev/vuln/GO-2026-5506
- Import Source
- https://vuln.go.dev/ID/GO-2026-5506.json
- JSON Data
- https://api.osv.dev/v1/vulns/GO-2026-5506
- Aliases
- Published
- 2026-07-24T18:35:55Z
- Modified
- 2026-07-24T19:00:23.233214512Z
- Summary
- OpenTelemetry-Go: Multi-value baggage header extraction causes excessive allocations in go.opentelemetry.io/otel
- Details
-
OpenTelemetry-Go: Multi-value baggage header extraction causes excessive allocations in go.opentelemetry.io/otel
- Database specific
{ "review_status": "REVIEWED", "url": "https://pkg.go.dev/vuln/GO-2026-5506" }- References
-
- https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-mh2q-q3fh-2475
- https://github.com/open-telemetry/opentelemetry-go/commit/aa1894e09e3fe66860c7885cb40f98901b35277f
- https://github.com/open-telemetry/opentelemetry-go/pull/7880
- https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.41.0
Affected packages
Go / go.opentelemetry.io/otel
Package
- Name
- go.opentelemetry.io/otel
- View open source insights on deps.dev
- Purl
- pkg:golang/go.opentelemetry.io/otel
Ecosystem specific
{
"imports": [
{
"path": "go.opentelemetry.io/otel/internal/global",
"symbols": [
"Debug",
"ErrDelegator.Handle",
"Error",
"GetErrorHandler",
"Info",
"SetErrorHandler",
"SetMeterProvider",
"SetTextMapPropagator",
"SetTracerProvider",
"Warn",
"textMapPropagator.SetDelegate"
]
},
{
"path": "go.opentelemetry.io/otel/baggage",
"symbols": [
"New",
"Parse"
]
},
{
"path": "go.opentelemetry.io/otel/propagation",
"symbols": [
"Baggage.Extract"
]
}
]
}