Skip to content
OpenAdvisories

Product · open-telemetry

opentelemetry-rust

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-48504

    OpenTelemetry Rust: Unbounded memory allocation in W3C Baggage propagation

    OpenTelemetry Rust is the Rust OpenTelemetry implementation. In 0.32.0 and earlier, BaggagePropagator::extract_with_context in opentelemetry_sdk did not enforce W3C Baggage size limits before parsing an inbound baggage header, so a large attacker-controlled h…

    open-telemetry opentelemetry-rust wasmcloud deno Wolfi crates.io