Skip to content
OpenAdvisories

Package · npm

@opentelemetry/instrumentation

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.1
    GHSA-f8pq-3926-8gx5

    Unsanitized user controlled input in module generation

    ## Impact The `import-in-the-middle` loader used by `@opentelemetry/instrumentation` works by generating a wrapper module on the fly. The wrapper uses the module specifier to load the original module and add some wrapping code. It allows for remote code execu…

    @opentelemetry/instrumentation npm