Skip to content
OpenAdvisories

Package · NuGet

OpenTelemetry.Resources.Host

1 known vulnerabilities.

1 result · Feed

  • High 7.0

    OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

    `OpenTelemetry.Resources.Host` NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the `host.id` resource attribute detector launches the `sh`…