Skip to content
OpenAdvisories

Package · NuGet

OpenTelemetry.Api

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2026-40894

    OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers

    OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1.15.2, The implementation details of the baggage, B3 and Jaeger processing code in the OpenTelemetry.Api and O…

    open-telemetry opentelemetry-dotnet OpenTelemetry.Api OpenTelemetry.Extensions.Propagators NuGet
  • High 7.5
    CVE-2025-27513

    OpenTelemetry .NET has a Denial of Service (DoS) Vulnerability in API Package

    OpenTelemetry dotnet is a dotnet telemetry framework. A vulnerability in OpenTelemetry.Api package 1.10.0 to 1.11.1 could cause a Denial of Service (DoS) when a tracestate and traceparent header is received. Even if an application does not explicitly use trac…

    open-telemetry opentelemetry-dotnet OpenTelemetry.Api NuGet