Package · NuGet

OpenTelemetry.Instrumentation.Http

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.1

CVE-2024-32028

Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore

OpenTelemetry dotnet is a dotnet telemetry framework. In affected versions of `OpenTelemetry.Instrumentation.Http` and `OpenTelemetry.Instrumentation.AspNetCore` the `url.full` writes attribute/tag on spans (`Activity`) when tracing is enabled for outgoing ht…

open-telemetry opentelemetry-dotnet OpenTelemetry.Instrumentation.AspNetCore OpenTelemetry.Instrumentation.Http NuGet

Apr 12, 2024