https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 05:30:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-220604 EUVD-2026-220604 https://cve.radiocsirt.org/vuln/euvd-2026-220604 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27513 <p>OpenTelemetry dotnet is a dotnet telemetry framework. A vulnerability in OpenTelemetry.Api package 1.10.0 to 1.11.1 could cause a Denial of Service (DoS) when a tracestate and traceparent header is received. Even if an application does not explicitly use trace context propagation, receiving these headers can still trigger high CPU usage. This issue impacts any application accessible over the web or backend services that process HTTP requests containing a tracestate header. Application may experience excessive resource consumption, leading to increased latency, degraded performance, or downtime. This vulnerability is fixed in 1.11.2.</p> <p>OpenTelemetry dotnet is a dotnet telemetry framework. A vulnerability in OpenTelemetry.Api package 1.10.0 to 1.11.1 could cause a Denial of Service (DoS) when a tracestate and traceparent header is received. Even if an application does not explicitly use trace context propagation, receiving these headers can still trigger high CPU usage. This issue impacts any application accessible over the web or backend services that process HTTP requests containing a tracestate header. Application may experience excessive resource consumption, leading to increased latency, degraded performance, or downtime. This vulnerability is fixed in 1.11.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-27513 https://cve.radiocsirt.org/vuln/ghsa-8785-wc3w-h8q6 <p><strong>Affected:</strong> NuGet: OpenTelemetry.Api</p> <p>### Impact _What kind of vulnerability is it? Who is impacted?_</p> <p>A vulnerability in `OpenTelemetry.Api` package `1.10.0` to `1.11.1` could cause a Denial of Service (DoS) when a `tracestate` and `traceparent` header is received.</p> <p>* Even if an application does not explicitly use trace context propagation, receiving these headers can still trigger high CPU usage. * This issue impacts any application accessible over the web or backend services that process HTTP requests containing a `tracestate` header. * Application may experience excessive resource consumption, leading to increased latency, degraded performance, or downtime.</p> <p>### Patches _Has the problem been patched? What versions should users upgrade to?_</p> <p>This issue has been &lt;strong data-start=&#34;1143&#34; data-end=&#34;1184&#34;&gt;resolved in OpenTelemetry.Api 1.11.2&lt;/strong&gt; by &lt;strong data-start=&#34;1188&#34; data-end=&#34;1212&#34;&gt;reverting the change&lt;/strong&gt; that introduced the problematic behavior in versions &lt;strong data-start=&#34;1266&#34; data-end=&#34;1286&#34;&gt;1.10.0 to 1.11.1&lt;/strong&gt;.&lt;/li&gt;&lt;li data-start=&#34;1290&#34; data-end=&#34;1409&#34;&gt;The fix ensures that &lt;strong data-start=&#34;1313&#34; data-end=&#34;1380&#34;&gt;valid tracing headers no longer cause excessive CPU consumption&lt;/strong&gt; when received in requests.&lt;/li&gt;&lt;/ul&gt;&lt;h4 data-start=&#34;1411&#34; data-end=&#34;1434&#34;&gt;&lt;strong data-start=&#34;1416&#34; data-end=&#34;1434&#34;&gt;Fixed Version:&lt;/strong&gt;&lt;/h4&gt; OpenTelemetry .NET Version | Status -- | -- &lt;= 1.9.x | ✅ Not affected 1.10.0 - 1.11.1 | ❌ Vulnerable 1.11.2 (Fixed) | ✅ Safe to use</p> <p>**Upgrade Command:**…</p> <p><strong>Affected:</strong> NuGet: OpenTelemetry.Api</p> <p>### Impact _What kind of vulnerability is it? Who is impacted?_</p> <p>A vulnerability in `OpenTelemetry.Api` package `1.10.0` to `1.11.1` could cause a Denial of Service (DoS) when a `tracestate` and `traceparent` header is received.</p> <p>* Even if an application does not explicitly use trace context propagation, receiving these headers can still trigger high CPU usage. * This issue impacts any application accessible over the web or backend services that process HTTP requests containing a `tracestate` header. * Application may experience excessive resource consumption, leading to increased latency, degraded performance, or downtime.</p> <p>### Patches _Has the problem been patched? What versions should users upgrade to?_</p> <p>This issue has been &lt;strong data-start=&#34;1143&#34; data-end=&#34;1184&#34;&gt;resolved in OpenTelemetry.Api 1.11.2&lt;/strong&gt; by &lt;strong data-start=&#34;1188&#34; data-end=&#34;1212&#34;&gt;reverting the change&lt;/strong&gt; that introduced the problematic behavior in versions &lt;strong data-start=&#34;1266&#34; data-end=&#34;1286&#34;&gt;1.10.0 to 1.11.1&lt;/strong&gt;.&lt;/li&gt;&lt;li data-start=&#34;1290&#34; data-end=&#34;1409&#34;&gt;The fix ensures that &lt;strong data-start=&#34;1313&#34; data-end=&#34;1380&#34;&gt;valid tracing headers no longer cause excessive CPU consumption&lt;/strong&gt; when received in requests.&lt;/li&gt;&lt;/ul&gt;&lt;h4 data-start=&#34;1411&#34; data-end=&#34;1434&#34;&gt;&lt;strong data-start=&#34;1416&#34; data-end=&#34;1434&#34;&gt;Fixed Version:&lt;/strong&gt;&lt;/h4&gt; OpenTelemetry .NET Version | Status -- | -- &lt;= 1.9.x | ✅ Not affected 1.10.0 - 1.11.1 | ❌ Vulnerable 1.11.2 (Fixed) | ✅ Safe to use</p> <p>**Upgrade Command:**…</p> https://cve.radiocsirt.org/vuln/ghsa-8785-wc3w-h8q6