Skip to content
OpenAdvisories

Package · Go

go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics

    OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. A handler wrapper out of the box adds labels `http.user_agent` and `http.method` that have unbound cardinality. It leads to the server's potential memory exhaustion when ma…