GHSA-g94r-2vxg-569jPublished

OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers

Exact source revision recorded 23 Oct 2026 16:01:25 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

osv · GHSA-g94r-2vxg-569j

Published

OpenTelemetry.Api

NuGet

ECOSYSTEM · introduced 0.5.0-beta.2 → fixed 1.15.3

38 explicitly affected versions

1.0.0-rc2, 1.0.0-rc3, 1.0.0-rc4, 1.0.1, 1.1.0, 1.1.0-beta1, 1.1.0-beta2, 1.1.0-beta3, 1.1.0-beta4, 1.1.0-rc1, 1.10.0, 1.11.0, 1.11.1, 1.11.2, 1.12.0, 1.13.0, 1.13.1, 1.14.0, 1.15.0, 1.15.1, 1.15.2, 1.2.0, 1.2.0-rc1, 1.2.0-rc2, 1.2.0-rc3, 1.2.0-rc4, 1.2.0-rc5, 1.3.0, 1.3.1, 1.3.2, 1.4.0, 1.5.0, 1.5.1, 1.6.0, 1.7.0, 1.8.0, 1.8.1, 1.9.0

OpenTelemetry.Extensions.Propagators

NuGet

ECOSYSTEM · introduced 1.3.1 → fixed 1.15.3

21 explicitly affected versions

1.10.0, 1.11.0, 1.11.1, 1.11.2, 1.12.0, 1.13.0, 1.13.1, 1.14.0, 1.15.0, 1.15.1, 1.15.2, 1.3.1, 1.3.2, 1.4.0, 1.5.0, 1.5.1, 1.6.0, 1.7.0, 1.8.0, 1.8.1, 1.9.0

Original source record · Cite this exact observation · Complete original publisher JSON