Go.Opentelemetry.Io Contrib Instrumentation Google.Golang.Org Grpc Otelgrpc vulnerabilities

1 known vulnerability affecting go.opentelemetry.io/contrib_instrumentation_google.golang.org_grpc_otelgrpc.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2023-47108HIGH≥ 0.37.0, < 0.46.02023-11-12
CVE-2023-47108 [HIGH] CWE-770 otelgrpc DoS vulnerability due to unbound cardinality metrics otelgrpc DoS vulnerability due to unbound cardinality metrics ### Summary The grpc Unary Server Interceptor [opentelemetry-go-contrib/instrumentation/google.golang.org/grpc/otelgrpc/interceptor.go](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/9d4eb7e7706038b07d33f83f76afbe13f53d171d/instrumentation/google.golang.org/grpc/otelgrpc/interceptor.go#L327) ``` // UnaryServerInterceptor ret
ghsaosv
Go.Opentelemetry.Io Contrib Instrumentation Google.Golang.Org Grpc Otelgrpc vulnerabilities | cvebase