{"id":"GO-2026-6258","revision":"a6db3dd278e1424fb4763f5cc8cb77bf","records":[{"revision":"a6db3dd278e1424fb4763f5cc8cb77bf","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6258","aliases":["CVE-2026-45404","GHSA-42cj-99w8-cp2p"],"title":"OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access in go.opentelemetry.io/otel/bridge/opentracing","description":"OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access in go.opentelemetry.io/otel/bridge/opentracing","state":0,"publishedAt":"2026-08-25T19:43:10+00:00","modifiedAt":"2026-09-02T22:10:54.3908288+00:00","affected":[{"ecosystem":"Go","name":"go.opentelemetry.io/otel/bridge/opentracing","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.11.0"},{"kind":"fixed","version":"1.45.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-42cj-99w8-cp2p","https://github.com/open-telemetry/opentelemetry-go/commit/93a693edeed0e07ce5ebd1dfe67af42d1e2055d8","https://github.com/open-telemetry/opentelemetry-go/pull/8693","https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.45.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6258","license":"OSV · upstream source license applies","key":"osv:GO-2026-6258","identifiers":["GO-2026-6258","CVE-2026-45404","GHSA-42cj-99w8-cp2p"]},"retained":false,"historicalAffected":[]}],"coverage":[]}