{"answers":{"affected":"9 open source packages ship an affected version, including go.opentelemetry.io/otel/baggage, go.opentelemetry.io/otel and go.opentelemetry.io/otel/propagation. It affects 1 product.","exploited":"It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-41178 exists.","fix":"Upgrade go.opentelemetry.io/otel/baggage to a fixed version for your release line: 1.42.0 or 1.44.0.","what":"CVE-2026-41178 is a medium-severity denial of service vulnerability in open-telemetry go.opentelemetry.io/otel/baggage, published on 4 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2026-41178 and fix it if it is affected.\n\nWhat it is: CVE-2026-41178 is a medium-severity denial of service vulnerability in open-telemetry go.opentelemetry.io/otel/baggage, published on 4 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-41178 exists.\n\nAffected packages and fixed versions:\n- go.opentelemetry.io/otel/baggage (Go): affected from 1.41.0; fixed in 1.42.0\n- go.opentelemetry.io/otel/baggage (Go): affected from 1.41.0; fixed in 1.42.0\n- go.opentelemetry.io/otel/baggage (Go): affected from 1.43.0; fixed in 1.44.0\n- go.opentelemetry.io/otel/baggage (Go): affected from 1.43.0; fixed in 1.44.0\n- go.opentelemetry.io/otel (Go): affected from 1.41.0; fixed in 1.42.0, 1.44.0\n- go.opentelemetry.io/otel/propagation (Go): affected from 1.41.0; fixed in 1.42.0\n- go.opentelemetry.io/otel/propagation (Go): affected from 1.41.0; fixed in 1.42.0\n- go.opentelemetry.io/otel/propagation (Go): affected from 1.43.0; fixed in 1.44.0\n- go.opentelemetry.io/otel/propagation (Go): affected from 1.43.0; fixed in 1.44.0\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-41178/ (Markdown: https://insights.sbomify.com/CVE-2026-41178/index.md)","id":"CVE-2026-41178","markdown":"https://insights.sbomify.com/CVE-2026-41178/index.md","name":"CVE-2026-41178","record":{"aliases":["CLEANSTART-2026-DD18561","CLEANSTART-2026-EC67398","CLEANSTART-2026-FG42108","CLEANSTART-2026-FN36797","CLEANSTART-2026-KF71007","CLEANSTART-2026-LN60743","CLEANSTART-2026-UX70251","DEBIAN-CVE-2026-41178","ECHO-05d3-7d92-f254","GHSA-5wrp-cwcj-q835","GO-2026-5158","MINI-2244-7j86-f8pj","MINI-2267-cfw4-p8q8","MINI-22x3-w9j7-2872","MINI-23w4-9gpq-fvpw","MINI-24fw-w786-jvr6","MINI-24vm-8pj3-q72v","MINI-24wp-8fqc-85c2","MINI-2543-89xv-m3wv","MINI-259x-5m6m-7gfw","MINI-25p2-fwwp-9p52","MINI-25rj-rrqg-rv7x","MINI-2674-vcjj-5vfh","MINI-267g-7hp2-c3cq","MINI-26c5-5wwq-7c39","MINI-26mg-3wgj-4jcq","MINI-26v4-p638-48j3","MINI-26wm-vwcv-28xr","MINI-27hf-3g4q-8h3f","MINI-287j-55rp-jqff","MINI-288x-r424-x626","MINI-2894-x5x9-22rq","MINI-28hf-gffj-936m","MINI-28mf-pxvg-h466","MINI-28mp-8vj9-j4g5","MINI-2964-gvp5-qcjq","MINI-29jw-r2c4-j3c6","MINI-2c2p-v24w-vfwh","MINI-2cxq-vc6r-8fxg","MINI-2f3q-38g5-w7p4","MINI-2f44-68qw-wh72","MINI-2f5q-52w7-prj2","MINI-2f6g-qwj4-7f25","MINI-2f89-h45q-pv96","MINI-2fr2-fv7w-v59r","MINI-2g2x-rxp5-xrw5","MINI-2gj4-fw48-2r65","MINI-2h26-2mfx-5q22","MINI-2h9q-4cjv-ch7q","MINI-2jm4-8h5v-5569","MINI-2mr4-mr6j-c7f6","MINI-2mxw-px2g-x5g2","MINI-2phr-262r-8m88","MINI-2pv2-2hw4-mcw4","MINI-2q48-x2hx-wq7p","MINI-2qx5-vx78-jqm6","MINI-2r3j-whg5-qx7r","MINI-2rrj-382r-9hxc","MINI-2v58-g6v3-vm3g","MINI-2v7g-655c-qc4c","MINI-2w3v-764w-j92m","MINI-2x6h-92r8-m9pq","MINI-2x9h-q84x-jwq9","MINI-2xjh-hmrq-wx59","MINI-327g-xjcx-pwqq","MINI-333v-8w93-vjq9","MINI-3384-23v5-44f9","MINI-33c9-j859-3r4p","MINI-33hg-3wvj-fr76","MINI-33q4-hx9x-5g25","MINI-345m-243g-hp7m","MINI-345v-fc72-3gch","MINI-3462-83f4-273g","MINI-34c3-r7p6-f28f","MINI-34p5-f2v7-hhxh","MINI-34pv-4hp5-xw9v","MINI-34vw-3qqr-9q22","MINI-36gv-25vr-g593","MINI-37qv-83hf-55qv","MINI-3825-67x3-h6v9","MINI-38pj-v43j-6f89","MINI-38r3-64m9-gvr8","MINI-3954-gqpq-359g","MINI-39gp-7rwv-8pq4","MINI-39hq-657g-5xgf","MINI-39pj-3vgw-cg2x","MINI-39w2-63m5-5ppj","MINI-3cwx-g7hp-5x56","MINI-3f23-53gr-p9c4","MINI-3f76-m2cw-9774","MINI-3f7p-rpm9-r9gw","MINI-3f87-26r3-hmpv","MINI-3g86-47f3-w4x3","MINI-3g8q-898w-7c5c","MINI-3gpr-85m8-53vh","MINI-3gwc-2p7w-8wj5","MINI-3hx3-65hj-fmhj","MINI-3jjx-ph93-q8f8","MINI-3m25-5w47-qf5r","MINI-3m95-rf2x-f77c","MINI-3mrh-hm3v-jfx4","MINI-3mxh-hhjr-rqhg","MINI-3p5p-x4cm-857q","MINI-3p9w-wpr9-45f8","MINI-3q3c-hwqc-6x5c","MINI-3qhr-j2h3-g9q9","MINI-3r4p-f692-7m34","MINI-3rx8-wwx2-73h9","MINI-3v3v-vfrh-mqc9","MINI-3v42-jg7m-8527","MINI-3vfr-qw53-xph4","MINI-3w4j-vp5r-c6qf","MINI-3w86-j5qr-5p85","MINI-3x85-qq4r-ff3w","MINI-3x89-vfjp-wqpq","MINI-422x-8mxg-mmj7","MINI-42c6-hr8c-fmg4","MINI-43hp-hwcj-7h5x","MINI-43jf-4c7g-85h5","MINI-44fv-m4cm-3hrf","MINI-45g2-fp48-p2fh","MINI-45rx-vppm-6jj2","MINI-46w8-4gqc-r9fp","MINI-46xr-fxx7-5872","MINI-472j-pff2-r84p","MINI-477g-5x36-6v6p","MINI-47rv-jh9r-95vp","MINI-48gm-8628-99f4","MINI-492f-5pvv-8c7j","MINI-495v-cr7j-q29x","MINI-49hw-m24h-mqcg","MINI-49wc-fhm8-f4vw","MINI-4c4q-p78c-w8r5","MINI-4chf-f46c-4rj5","MINI-4cm6-j6h8-ffr7","MINI-4f45-7hxf-4459","MINI-4fxf-mmpc-7xw8","MINI-4gcq-xqrg-42xr","MINI-4h4m-9rh4-3qfc","MINI-4hgw-mf64-9rjh","MINI-4hj2-5gcv-w8c6","MINI-4j9g-r4mc-729f","MINI-4jj5-6gp8-v8jq","MINI-4jjj-68x2-wc4w","MINI-4m25-6c6g-gxvf","MINI-4mqj-qc34-pwv8","MINI-4p53-r45h-xhw2","MINI-4pq6-hxjj-3qmf","MINI-4pr5-c84j-76jm","MINI-4pvq-67h2-xp5c","MINI-4qf3-3696-rj5h","MINI-4qww-c7fv-297j","MINI-4r38-qqj6-c8w9","MINI-4rj3-f725-rwp8","MINI-4v86-f3fc-mwp9","MINI-4vq9-cxvq-4cmr","MINI-4w87-wqvc-r395","MINI-4wm4-c2hm-5fxf","MINI-4wxr-fmm8-9qhx","MINI-4xrq-5m2x-249v","MINI-4xw9-cm6v-gvj5","MINI-4xxq-r232-2ggq","MINI-52qm-3hfq-cq4p","MINI-5353-vrv4-2q46","MINI-53q8-77xx-jvf5","MINI-543p-wqgx-vxw3","MINI-548m-6g9q-wjg3","MINI-5499-6834-cpx2","MINI-54p4-52r5-rjr6","MINI-55hj-x6j6-xvm9","MINI-55hp-3w67-pxvw","MINI-55r8-5j49-jm78","MINI-5629-pgm7-hq42","MINI-563w-mc78-7c59","MINI-56fc-j3rq-89fq","MINI-5748-84w5-m356","MINI-5793-vmm6-cm6p","MINI-57mh-j7h9-622j","MINI-58jv-53fq-f52j","MINI-58v8-5cjc-3qc9","MINI-58vp-v68j-jqwv","MINI-59v2-2c4j-rcrp","MINI-5cw2-w6jc-j72v","MINI-5cww-36px-h74c","MINI-5fw6-rr8j-h8fr","MINI-5hfg-hwh3-fxpq","MINI-5jr6-rj32-vmcp","MINI-5jr8-qr3f-c2x7","MINI-5m74-vm89-7g77","MINI-5mm8-gg7x-vrgp","MINI-5mmc-6h6q-cmmc","MINI-5p4p-jpj7-674f","MINI-5p6q-pq7g-8fqx","MINI-5q59-546q-pv24","MINI-5r9m-2c6r-hggp","MINI-5rcv-jggm-34q8","MINI-5rv3-gjx6-hrrc","MINI-5rxq-xc9h-vrq3","MINI-5v48-j642-7xvq","MINI-5v4q-79mj-f3qj","MINI-5vhp-8xfx-9656","MINI-5w69-gwxm-r7rc","MINI-5wm9-x6qx-46gp","MINI-5ww8-7c84-q764","MINI-5x8q-h923-p7g2","MINI-5xp6-p276-7wx2","MINI-5xqm-q4jq-9fmh","MINI-5xvg-c426-vmp6","MINI-6267-xcjq-2q2g","MINI-62w6-5879-g7vc","MINI-62wm-pgw4-35wg","MINI-63r8-4pmx-r4q3","MINI-63v9-3wqv-ffp9","MINI-6425-rwcf-h6fw","MINI-64xv-wfj4-q4mh","MINI-652j-xq2x-677r","MINI-655f-6rp4-7cx3","MINI-6563-gp6r-fp8m","MINI-65hm-8mpc-x977","MINI-65qq-px9q-5hwv","MINI-65r7-5mxx-7926","MINI-65vq-57qj-ghr8","MINI-65x4-9r87-x357","MINI-66hq-6ghp-84g3","MINI-672p-7cq5-xhw5","MINI-67f8-fg64-x4gh","MINI-67h2-rv4p-j3vm","MINI-682g-764h-836v","MINI-68h5-x9qm-3rm5","MINI-68hc-9673-p57f","MINI-68hg-mffm-x6jr","MINI-68j8-xr23-25rh","MINI-68vp-g26j-q2q5","MINI-693h-cw32-vfcj","MINI-6c4g-m8hj-j3c7","MINI-6cxr-j6rv-j48p","MINI-6g3r-825w-mr27","MINI-6hhc-h64g-ppxg","MINI-6hp3-jh3q-5c4v","MINI-6hqw-887p-v5wc","MINI-6hv7-f33r-6xjh","MINI-6jg6-5rr4-9h5q","MINI-6jpm-gp34-vp79","MINI-6jw4-7p4h-8qgf","MINI-6m4m-x62q-xvg2","MINI-6m62-gfmj-j4cv","MINI-6p43-4cr3-qj3f","MINI-6pp7-m4gw-x2mp","MINI-6qmx-75m2-965j","MINI-6qww-v6cc-mvmm","MINI-6r2r-m27q-fc7c","MINI-6r3j-m63c-w68v","MINI-6rh5-9pvc-gv6j","MINI-6vv9-vr8w-836f","MINI-6wpx-6hxv-42wh","MINI-6xgp-j2h9-jc7c","MINI-6xwj-rp4h-xr2x","MINI-72ff-8jx5-mxj3","MINI-72h4-47wh-q38v","MINI-72h6-fwv2-693p","MINI-733x-pxqf-28mf","MINI-73hx-w5cp-gjm9","MINI-73pj-9cx7-f86h","MINI-744m-h8hg-qgvc","MINI-74fh-fx5p-jvp2","MINI-74fm-xwgf-9cmm","MINI-7543-mg8f-47xw","MINI-75g2-mxr7-gv42","MINI-75p2-q3mx-qrg7","MINI-75wj-27p7-qw73","MINI-767c-6v8g-m3cx","MINI-76c7-95fj-28q9","MINI-76p2-9h9j-mx5w","MINI-76w5-v4c5-9g8f","MINI-776q-3gr4-rgpc","MINI-7795-7xjv-58rq","MINI-77m3-j2m5-8pq5","MINI-77m4-7xhw-8fqp","MINI-77mg-5hfx-62f4","MINI-7863-843v-cqhq","MINI-78f9-65vf-q4wm","MINI-79fv-vpcx-643r","MINI-79jp-x795-3jp6","MINI-7c53-79fp-h47q","MINI-7cgw-9r2c-6gp7","MINI-7cm2-v926-6qr2","MINI-7cm3-m43q-h64c","MINI-7frc-ggxw-wpc9","MINI-7g5j-g69m-jp8m","MINI-7g9x-rf75-3q8j","MINI-7gjh-4859-6wc3","MINI-7gq6-pqfp-9fmv","MINI-7h2m-vhrx-hf68","MINI-7h4f-9x4c-vqrm","MINI-7hxp-j446-8gfr","MINI-7j69-3426-cpj9","MINI-7j69-975p-r34q","MINI-7j76-v8hh-w64v","MINI-7jj3-hwff-25g3","MINI-7jj8-x786-hgvm","MINI-7p36-9795-6qh6","MINI-7qh2-985q-p3gx","MINI-7qxc-rfr7-43x6","MINI-7r2h-4h49-xxjh","MINI-7rfw-v5w5-rx3j","MINI-7rh3-j4r2-hj98","MINI-7rmj-wpv6-cf99","MINI-7rv5-rwvm-r2c4","MINI-7v8w-q3xf-gc97","MINI-7vj8-hh59-v5r5","MINI-7w93-w677-pmm6","MINI-7wgj-q32h-99j5","MINI-7wrc-rjmc-hq97","MINI-7wwf-m329-3qwh","MINI-7xqc-7865-cpvh","MINI-7xr5-7cfx-chcc","MINI-822x-7x9w-285g","MINI-824q-p8fm-j253","MINI-82x5-rxvx-cfg4","MINI-838g-6xr6-77qc","MINI-842w-rqqj-chx4","MINI-8493-g262-qrq3","MINI-853m-8jjr-9xp4","MINI-8669-jxm8-4qqq","MINI-866w-2pqm-vj37","MINI-87vx-4655-676f","MINI-87wx-96pw-q2w9","MINI-8833-5jcx-pv7v","MINI-89cf-q3v3-239r","MINI-89cj-vh2m-f2j3","MINI-8c59-j5vh-prww","MINI-8c63-wr5r-p799","MINI-8c93-v8pq-cf89","MINI-8cf6-h98g-p6g2","MINI-8cjx-jjv5-3h4h","MINI-8cmc-7gw9-5ff3","MINI-8cwr-jvxq-x952","MINI-8f6m-7fcp-86jc","MINI-8g6x-x82q-758r","MINI-8ggp-3xvv-5p3p","MINI-8gh4-hq3j-34q8","MINI-8gqh-83j3-jfvr","MINI-8hrp-w6vw-59gx","MINI-8j9w-7rh4-mvmc","MINI-8jhm-xq66-wh7c","MINI-8m96-cff7-7x4r","MINI-8mp4-rm8f-83w2","MINI-8p78-4x6m-hr4c","MINI-8pr5-cm9j-4crj","MINI-8prm-7fh3-9xrf","MINI-8qvw-2cf3-mj63","MINI-8v33-gff3-p22j","MINI-8wf3-4fq3-fc5j","MINI-8x4w-qf62-98hj","MINI-8x75-9wpm-xxx2","MINI-9238-qh3m-mrrp","MINI-92qp-8f9c-4hp3","MINI-935r-m3qf-qhr6","MINI-94c8-r6xx-xwqj","MINI-94m6-qcq2-52fh","MINI-94xm-rj9c-qx5j","MINI-95c2-4wh4-3h8m","MINI-95x6-2wj2-wfhq","MINI-9698-h27p-2g4p","MINI-96cf-4qgf-fj3c","MINI-96g2-j8h7-5cj2","MINI-96jv-96mm-7jcq","MINI-96ph-5rrj-c546","MINI-973r-cf8f-6fvw","MINI-97cr-mx54-rwqg","MINI-97v8-jvmc-j6p3","MINI-9829-9r2m-f2m4","MINI-982x-cq7h-m5f9","MINI-9857-w36m-8rx7","MINI-985q-rjw3-3wpf","MINI-987c-pgqj-xcj2","MINI-98c2-4rwp-xx99","MINI-98qp-48r9-w5pf","MINI-98v5-45wf-v87f","MINI-997f-q687-hppm","MINI-99vw-v4mj-w6vh","MINI-9cjq-p3jw-pr78","MINI-9cvc-pg8c-ccch","MINI-9f58-px4f-892f","MINI-9fmw-2rrr-8996","MINI-9fph-hwf8-3hrc","MINI-9gpq-3mpq-p77x","MINI-9gr5-hph7-m82m","MINI-9hwh-hccm-3gqq","MINI-9j9g-4p4h-hxgq","MINI-9jjm-jj6r-7gh3","MINI-9jrf-26g2-cr88","MINI-9mjm-q2pw-87hf","MINI-9mqv-h5jf-8425","MINI-9p6c-2w3c-2f4c","MINI-9pcc-rf9j-86x5","MINI-9pf8-f2gr-84cg","MINI-9pj6-jmg2-chph","MINI-9prj-g9cq-26rj","MINI-9q36-46jx-vwv7","MINI-9qp7-vj8h-qw5p","MINI-9r3p-cxhg-r959","MINI-9rg5-2fv5-6qx6","MINI-9rp3-c88j-jg83","MINI-9rpv-w4xg-fp58","MINI-9rqc-jhcr-ghv9","MINI-9v9c-xc36-rf48","MINI-9vw6-9fqw-7x53","MINI-9wf8-4qfx-p49h","MINI-9wrp-p7xc-w6p5","MINI-9wrr-9qc9-qwpp","MINI-9xj4-v79m-7jr7","MINI-c2mm-q893-7hp6","MINI-c37h-qp57-m7wc","MINI-c3gp-55m5-q973","MINI-c3jw-v9vx-6p8c","MINI-c3qm-g8wc-94rq","MINI-c3vf-24rc-4759","MINI-c486-r5pr-69q7","MINI-c4xq-wv4x-w86x","MINI-c52h-fm37-f2h2","MINI-c5fg-p9f9-87qc","MINI-c5pw-4qf8-2c53","MINI-c5r2-q99h-9qcf","MINI-c669-4g98-p287","MINI-c6q8-j9jx-fxhq","MINI-c86x-w5m2-x8w6","MINI-c8v3-872f-7793","MINI-c93j-qxw7-428v","MINI-c95c-j522-699x","MINI-c987-cxhg-6vg8","MINI-ccc9-pw4q-gq8m","MINI-ccmm-c4wg-fhmh","MINI-cf9g-g4vx-rv24","MINI-cfjc-c446-r272","MINI-cfm6-v42q-hc33","MINI-cfp3-xc22-84pm","MINI-cg67-hmch-jmw8","MINI-cg79-qvjj-cm8v","MINI-ch2v-hhj5-5rrr","MINI-ch7x-pvr9-h3jp","MINI-chcc-rrpg-934q","MINI-chcv-p3w2-m4v5","MINI-chmp-354f-mx9f","MINI-chqp-5jhj-r5c2","MINI-chwx-wjf8-mm3h","MINI-cj52-59p4-pqqp","MINI-cj53-8qqw-jc3r","MINI-cjg7-5c9h-qcp3","MINI-cjr9-7cjg-qcvr","MINI-cjxq-24f8-jh29","MINI-cmgc-4v33-mxgh","MINI-cp6r-jjp8-3mvm","MINI-cpq9-2ghr-m2qr","MINI-cpwq-cg83-pxfx","MINI-cqf3-884r-qjm7","MINI-cqfw-jw7f-r2vg","MINI-cqmf-mjgw-q22q","MINI-cqr8-ff52-3jv3","MINI-cr3c-797r-c52h","MINI-cr9q-hmjx-536r","MINI-crhm-p9mq-xp9g","MINI-cv84-wg22-7jh5","MINI-cvpj-45x3-hcwr","MINI-cvv5-v284-4fqv","MINI-cwj5-fvr9-vjhp","MINI-cwwf-f523-m4jv","MINI-cxjg-h36g-79h2","MINI-cxqq-29hg-fgvq","MINI-f25g-8g5f-wc88","MINI-f29g-x6fq-gh39","MINI-f56p-w6fh-qr8f","MINI-f5mq-cm6r-wxrg","MINI-f6rg-97j2-3cjr","MINI-f6x7-hxxj-r6cj","MINI-f7mx-3cfh-wp23","MINI-f8gf-69p6-qgc4","MINI-f8gm-mm4j-6qph","MINI-f8gr-m753-g7rp","MINI-f8mr-c87g-qjc2","MINI-f8pv-xgrm-7pcc","MINI-f94q-8hc2-j8hx","MINI-f9j3-jjpc-6cvj","MINI-f9p2-j42p-p5x7","MINI-f9pp-c59r-72jv","MINI-f9q9-7wm3-j8pc","MINI-f9qg-65gp-pjjg","MINI-fc59-pjmq-5rj9","MINI-fc7r-g2qj-2ff6","MINI-fc8g-86vp-3h9q","MINI-fccq-g763-hc9h","MINI-ff5p-8hpg-p63w","MINI-ffjc-x342-32pv","MINI-fg25-vh5q-jw8p","MINI-fg87-2hcp-vqqc","MINI-fgfp-9r27-h4r4","MINI-fhf8-3gv4-m45r","MINI-fj33-cqqv-r3qg","MINI-fjg3-mxxp-vg72","MINI-fjm7-63hg-59p2","MINI-fjm8-432w-7hj6","MINI-fjp3-8fmw-qq38","MINI-fm8g-6hr6-3jwj","MINI-fmrf-hgr3-4j4f","MINI-fmvc-x54q-wr4f","MINI-fq3h-6p9q-g838","MINI-fq5w-5xcm-5wgx","MINI-fqhq-8mfq-cm6x","MINI-fqq9-r497-6w79","MINI-fqv8-h579-mwp8","MINI-fv67-2qwq-p9mw","MINI-fvcr-fc73-r2w5","MINI-fvfh-qcr5-6w3p","MINI-fwg2-pw7j-wf7r","MINI-g228-8c2c-r3r5","MINI-g242-c299-53vj","MINI-g24m-fwcj-j6pm","MINI-g25j-2xp3-5jcw","MINI-g2pf-6xv8-w2q3","MINI-g4cp-jchr-q3g3","MINI-g4xr-pvw6-3cfc","MINI-g5qh-23xq-6c4p","MINI-g5r8-8pgq-j54q","MINI-g64g-f2m5-2p53","MINI-g6fc-vrh4-h2r7","MINI-g6mx-xc6m-v6w2","MINI-g6pw-7q3j-j9vx","MINI-g6w3-c8cf-32pc","MINI-g75w-57f7-4vj4","MINI-g778-v89g-p5cq","MINI-g7g7-q9p2-2v75","MINI-g8jj-pjg6-38v8","MINI-g95q-33r3-wmgq","MINI-g98f-75vm-wwgg","MINI-g9fx-gxr6-52cv","MINI-g9qp-m55g-jr4f","MINI-g9r8-6p5m-ccvx","MINI-gc6v-8cpj-h4gj","MINI-gc9h-wpg9-xrhq","MINI-gcfm-gqr9-gccj","MINI-gcgj-wfxv-x2j9","MINI-gcgw-ghqh-57gj","MINI-gcx6-q8h3-cxr9","MINI-gf7f-66qw-w7h8","MINI-gfqc-w56c-h7rh","MINI-gfqp-59xf-5992","MINI-gg2g-3xc4-2wj3","MINI-gg9c-3pcc-mwqr","MINI-gggw-64gj-f8wh","MINI-ggr4-hr62-m647","MINI-ghmg-f6pm-hqq6","MINI-gj54-vrjf-jjr5","MINI-gjrp-9c56-rgh8","MINI-gjrx-4cpv-qjvq","MINI-gmr2-jmgg-p7fr","MINI-gmrf-r57v-j2p5","MINI-gpmq-25rw-c3rv","MINI-gpr5-hjqw-hpgq","MINI-gq2m-gfj2-gq32","MINI-gq3g-jvc2-x3pm","MINI-gq7x-c9jc-x686","MINI-gr2g-fc4x-v862","MINI-gr93-wr9q-55r8","MINI-grfg-cc2c-wjcx","MINI-grvw-xc67-5hww","MINI-gv3p-5fvm-hjgh","MINI-gv4x-798g-482c","MINI-gv8f-gfgq-5wqf","MINI-gvg7-9rgv-95c9","MINI-gvh4-pm87-gpc7","MINI-gw7j-cw93-mv2x","MINI-gx78-p9xr-94mw","MINI-gxmr-rjjj-x3jv","MINI-gxpm-mx97-xrmx","MINI-gxpw-ph3c-9gvq","MINI-h262-hh7r-qpgm","MINI-h2c3-rxh7-5h96","MINI-h2mm-878j-qq4v","MINI-h32p-xghj-grvx","MINI-h33j-h446-j37c","MINI-h35w-vhrm-pj4q","MINI-h3c5-gxhm-rvfm","MINI-h3gv-mh37-97r9","MINI-h3jw-5gfr-qjhj","MINI-h3p4-gf5r-jp5v","MINI-h4w6-6qwq-rm2p","MINI-h53v-6p5m-h43m","MINI-h59q-w564-f336","MINI-h5mx-hh49-9m37","MINI-h5pm-43jw-h8qc","MINI-h6q7-6q84-cp8m","MINI-h6w9-cqg6-9c52","MINI-h72p-w447-m479","MINI-h7v5-gf7j-rj88","MINI-h7xc-hw7h-c6p7","MINI-h84q-84fg-m3h5","MINI-h8vf-432j-r3w9","MINI-hcw6-7pcj-jr2v","MINI-hf4w-rxqc-xrwf","MINI-hfq6-gwpc-4pfp","MINI-hg8p-8976-xf9q","MINI-hh5x-gfp8-652q","MINI-hh8m-mqpc-rppf","MINI-hhm8-w97g-p638","MINI-hj3j-69v5-jc3h","MINI-hjq2-6vwf-r52j","MINI-hjrc-9v78-7vwq","MINI-hjwh-pfh7-fwh3","MINI-hjxp-rpj6-54p6","MINI-hmr4-7ccf-6ppj","MINI-hpjg-2gwx-6822","MINI-hqgv-pxg9-rqgr","MINI-hqr6-79h5-78jp","MINI-hqr7-j263-7mrp","MINI-hv34-m4vf-73hf","MINI-hvh7-5549-rqv6","MINI-hvwg-96cf-x32v","MINI-hw89-v4g5-gpc8","MINI-hwp4-9mvf-jcf9","MINI-hwxh-r4hv-h2vx","MINI-j29h-v65q-4f64","MINI-j2g5-pvf3-h4v9","MINI-j2pq-rqvp-jjv6","MINI-j2q4-chc9-hxf9","MINI-j3pp-4p86-37xv","MINI-j4f3-g74c-m6hj","MINI-j4vg-jrx9-v6pj","MINI-j524-g88v-6qw6","MINI-j55p-rc88-hpjp","MINI-j5rx-5qqp-v7q3","MINI-j5wx-5mmx-5wx9","MINI-j67c-5h88-29mj","MINI-j6qc-mjg7-v4g8","MINI-j77g-2pqf-m638","MINI-j787-3r6q-vr7p","MINI-j7f3-37pr-gpjc","MINI-j7qp-438x-46ph","MINI-j7v5-652m-7833","MINI-j7vg-m4h8-455q","MINI-j857-4xj5-9j65","MINI-j8g5-36v8-wrr8","MINI-j8jh-f7qm-83vj","MINI-j9v3-jrqh-wmjv","MINI-j9xp-vhw2-r625","MINI-jc2v-jq93-r72g","MINI-jc7f-8qmv-7hvh","MINI-jc8h-9qm8-q8f6","MINI-jcmp-r3r2-hwjp","MINI-jcmr-jpm5-fr79","MINI-jcvm-6r9r-r6rf","MINI-jcvx-w6qx-h552","MINI-jcx9-22qj-r262","MINI-jf48-6jx9-4whr","MINI-jf8g-rh9q-vv83","MINI-jgcq-x6j4-mq65","MINI-jgf5-5jwf-p383","MINI-jhmp-w638-f3wg","MINI-jj3q-54hf-cpw9","MINI-jj62-rqj9-p785","MINI-jjgm-h4r5-v2w3","MINI-jm2q-rxwj-mjpx","MINI-jm5j-98j2-w5gr","MINI-jp67-3ch4-76g9","MINI-jp83-8j64-34fq","MINI-jpxp-gx47-g3rj","MINI-jq43-6f6x-xx76","MINI-jq5x-847f-p92q","MINI-jq8g-9x52-xhj9","MINI-jqpg-89c8-pfmc","MINI-jv33-qh8h-mr7r","MINI-jwqg-4mw7-fg3f","MINI-jx7v-49r6-2f6f","MINI-m2f5-2x92-g28w","MINI-m2h4-95c7-28w4","MINI-m3fh-7v5q-pfxw","MINI-m3jw-48wq-v75w","MINI-m4gw-47rx-432p","MINI-m4r2-jqrq-26gh","MINI-m4x3-2ww7-99mm","MINI-m576-5gfw-6mjw","MINI-m7p5-696m-q4xr","MINI-m82m-w2r7-8jhx","MINI-m93p-36rx-xx83","MINI-m9r6-wvg6-gmr8","MINI-mc2x-ww69-vf94","MINI-mc57-8j59-8cxh","MINI-mc65-x83f-4qjg","MINI-mch2-c4x5-rwmf","MINI-mff7-8h83-c552","MINI-mg49-qp57-95p7","MINI-mgj9-3j5f-9qvp","MINI-mgvc-vvmx-9qrw","MINI-mgx6-29g9-m8j3","MINI-mhpx-3gp4-7hwx","MINI-mhww-vj2r-3wmq","MINI-mj5r-658j-cgfq","MINI-mjrg-9qvg-j89h","MINI-mjrh-g882-wq9h","MINI-mjrj-49xw-jqrq","MINI-mmrx-f7cq-r7h8","MINI-mmxj-cmjr-9962","MINI-mp63-pc8r-55m2","MINI-mpjc-5xhw-6xfr","MINI-mpx8-jf3c-h7cg","MINI-mqh2-m3cw-wcj7","MINI-mqr2-vxx9-r5cg","MINI-mqw7-2p2r-5x25","MINI-mr66-9rh6-pxg2","MINI-mr9m-r6c6-7h35","MINI-mr9v-2jr4-wfj3","MINI-mv67-7xmc-6j4h","MINI-mv83-w6f8-7hwg","MINI-mvc2-883m-r39c","MINI-mvv3-7jjm-wpvj","MINI-mxm5-x4xh-v773","MINI-p2x5-h64g-gjvw","MINI-p2x9-q43v-jm7w","MINI-p35g-phr7-ppj2","MINI-p3x4-3jm8-4p27","MINI-p44q-r3c5-4phh","MINI-p4cq-wp6f-459x","MINI-p4rh-9w36-cx63","MINI-p594-q9x8-p3rx","MINI-p5cq-w728-3hqg","MINI-p66c-596c-prg2","MINI-p6mm-2g4q-g7r9","MINI-p6p3-5h97-g82x","MINI-p74w-fc76-jg7r","MINI-p7r2-c7g4-9phg","MINI-p8qg-9j73-8gxg","MINI-p95c-gmr9-g36c","MINI-p9wv-f7gp-jcrg","MINI-pc2m-mxw2-xgw6","MINI-pc8x-q46f-f388","MINI-pcjv-cp2r-p966","MINI-pcww-rm24-4f67","MINI-pf74-mhgf-2xp4","MINI-pfmq-8hj9-h6xv","MINI-pgcv-m4x3-w533","MINI-pghm-6jj3-m6qv","MINI-pgx5-pmh7-9crx","MINI-pgxq-qgr6-g779","MINI-phqg-mp97-xhvj","MINI-pj77-f9v8-xrg5","MINI-pj88-pmpv-89f5","MINI-pm4h-qr9m-27jf","MINI-pmpm-q3qw-hpxj","MINI-pph4-6r64-w9j3","MINI-ppvc-4xgg-wwwh","MINI-ppxh-pfq3-5923","MINI-pqgw-mm92-h4hf","MINI-pqpv-66w9-x78c","MINI-pqrj-jcc7-8m6q","MINI-pr5p-8wgr-h9jc","MINI-pr86-r8mw-x97w","MINI-prjq-8vj8-g2f4","MINI-prjv-r7hc-x85c","MINI-prqv-qwgr-35c7","MINI-prxp-3q3m-wgmg","MINI-pv24-gvjq-vq5g","MINI-pv75-cpfp-46rx","MINI-pv9p-4gv5-67ww","MINI-pvf2-gjv9-939j","MINI-pwf7-m2mw-2439","MINI-pwhf-729c-5439","MINI-px5q-ww8p-rqx2","MINI-px6j-wfqw-485g","MINI-px7f-9xq8-ph2x","MINI-pxcg-hc4r-vwpg","MINI-pxmj-c928-82mc","MINI-pxwx-wm2v-mqhv","MINI-q257-j6h5-96mx","MINI-q2f5-vx92-p4jm","MINI-q3fc-vqf7-w5gm","MINI-q3gg-m87m-c75v","MINI-q3jm-7x3j-7jgf","MINI-q43g-3vm4-vvwm","MINI-q52x-hxhg-qvp7","MINI-q5cc-vm74-5jj2","MINI-q678-p72g-27mr","MINI-q6c2-6f93-fxrj","MINI-q75r-9g36-2rxj","MINI-q7rx-xjq9-3vp6","MINI-q8f3-r282-5r3q","MINI-q8gj-94rm-53cx","MINI-q8jp-x8wp-8c6c","MINI-q8r2-fq5p-qfw5","MINI-q939-2cg7-xxj7","MINI-q9jc-g42x-4rmp","MINI-qc4m-qj4q-74p2","MINI-qcw5-f2v3-646p","MINI-qf54-4fw2-h6gv","MINI-qfj7-3fx7-j7fj","MINI-qfv2-v4rj-28cv","MINI-qg8c-fmjv-m495","MINI-qgh9-vgh7-ww5p","MINI-qgp3-h6qp-hmq7","MINI-qj3w-vvc2-5j5x","MINI-qjv6-6grx-vv2w","MINI-qjw9-wpmj-257h","MINI-qm87-grp7-mfff","MINI-qmff-m6x3-4hw3","MINI-qmhf-p68f-44xv","MINI-qmjq-255f-4r58","MINI-qp22-74hr-wjrj","MINI-qpc6-xh44-hcxc","MINI-qpqr-24m2-278v","MINI-qqp8-p296-gqgc","MINI-qqr7-48wh-2hhg","MINI-qr5c-65cg-f4px","MINI-qr5r-cr9w-vpx8","MINI-qrq5-wchr-37fq","MINI-qrrg-7m57-vj3r","MINI-qrw4-5286-v27g","MINI-qv24-qj27-wqqh","MINI-qvcx-4jr6-8p27","MINI-qvhj-c48r-v38h","MINI-qvjq-jp2w-wmp9","MINI-qvp7-37m4-pjhq","MINI-qw8q-6cf3-ccfm","MINI-r2g6-2626-p6j5","MINI-r2vf-vvw4-gm7j","MINI-r3f9-3x58-prcx","MINI-r3rx-h96x-jw85","MINI-r3wj-mqhf-g4g9","MINI-r43v-7gm6-83jc","MINI-r46w-jqf4-h699","MINI-r4hg-mjmc-98rh","MINI-r4qj-h2cw-35h4","MINI-r587-r83f-842w","MINI-r5gj-g6fp-9ww6","MINI-r5j6-9c8w-q2rq","MINI-r63p-chqr-cpcr","MINI-r642-6wjc-xqf2","MINI-r65w-xf3v-g3fq","MINI-r6gp-gqvq-gc34","MINI-r6pj-wfp7-m97h","MINI-r72h-j47v-2fwp","MINI-r72r-25m9-4jhg","MINI-r7h4-9f9g-cpwr","MINI-r7hm-9fcg-3f5r","MINI-r7hx-8559-pggj","MINI-r7rc-r9f7-9vvm","MINI-r84j-chmp-7345","MINI-r86g-379j-8777","MINI-r94x-9w36-qvrr","MINI-r979-r5hp-8298","MINI-r9pr-wr5p-5pjw","MINI-r9r7-j976-h69g","MINI-rf28-wfwq-mvrh","MINI-rg47-j9q2-x2j7","MINI-rggm-mxjp-8hmx","MINI-rgjf-p6c8-6p68","MINI-rjj5-7ff9-6463","MINI-rjq7-cp3g-59rj","MINI-rjqg-qrgm-786g","MINI-rjx4-2hjj-r3cc","MINI-rmrc-676g-cfvw","MINI-rmv4-9p2c-rwmh","MINI-rqwc-wq9f-frrp","MINI-rqxc-vrw9-x245","MINI-rr6c-h9rq-3p7q","MINI-rr7v-mjv3-fwxf","MINI-rwf4-gqrj-wr65","MINI-v285-gc9w-ghw5","MINI-v32v-xj5f-qx7h","MINI-v34r-fmxx-6q92","MINI-v36v-q25x-g65f","MINI-v3fw-pcwh-rhvg","MINI-v3mq-hjr7-4xh8","MINI-v3q9-w548-9qhr","MINI-v3qh-grg7-qqj4","MINI-v46j-mqgp-w2p7","MINI-v48x-qf82-mrrj","MINI-v6fp-x55r-qg35","MINI-v746-rhqw-f9fc","MINI-v74h-fwpp-78gq","MINI-v78x-v9h7-xw8h","MINI-v7v7-x5rm-338h","MINI-v8rw-64pc-w5xr","MINI-v8x9-mm8c-39x5","MINI-vc79-r4gx-m9r2","MINI-vcp5-6x57-hv64","MINI-vcrw-3hh3-cmm4","MINI-vcwv-g96j-292j","MINI-vf73-4h8v-5jmh","MINI-vf8p-w2qw-3fmx","MINI-vf99-4f2x-vgj3","MINI-vfpr-q49r-95gv","MINI-vfrm-wq2x-5m76","MINI-vgr3-xmj7-86gx","MINI-vgxw-rr26-76jw","MINI-vh77-xccw-8j73","MINI-vhqc-5jxx-wcj6","MINI-vhw8-grpq-r674","MINI-vjj2-vq5c-mf9m","MINI-vjm2-rwwf-px5p","MINI-vjq8-f256-5rq8","MINI-vjr6-83f3-m433","MINI-vjx6-224g-7mwf","MINI-vjx6-wxf5-5fxq","MINI-vm7g-m956-c75q","MINI-vmc8-797v-phfj","MINI-vmc9-cgr6-3xwp","MINI-vmg4-67rx-r7mx","MINI-vmj7-rx2p-pm89","MINI-vp5f-j9g2-vfr7","MINI-vpc3-39g2-9xxw","MINI-vphm-965p-29gm","MINI-vqm7-rxw9-73h6","MINI-vqqm-x87m-9f95","MINI-vqw2-vc68-9gp9","MINI-vqwj-w3q6-m624","MINI-vqwv-w769-68mh","MINI-vr47-63hg-xf6w","MINI-vr96-5mj7-vwjh","MINI-vrhc-h7hh-gmgr","MINI-vrvp-rw25-ghpg","MINI-vvgc-p5fp-mm2g","MINI-vw2m-x74j-ppcc","MINI-vwh6-h7cv-v5cm","MINI-vwqx-vw52-fp83","MINI-vxpr-vr69-h63m","MINI-vxw3-9345-wg3m","MINI-vxwm-2wv8-ppwm","MINI-w22j-jg2f-rcwp","MINI-w257-qjvp-jvmj","MINI-w28v-mq4j-cg38","MINI-w2fg-cww6-798h","MINI-w33v-vv9v-xg4x","MINI-w45j-7jhc-mc47","MINI-w492-6mhr-j6hh","MINI-w537-cm95-vwm5","MINI-w5fr-w2j5-5f52","MINI-w72h-p6jm-346j","MINI-w798-9hj8-6ffx","MINI-w7mr-hxxf-mp9x","MINI-w7p7-p8g6-54wm","MINI-w7r9-hqcf-8q8p","MINI-w7wr-p987-rq8f","MINI-w847-p29r-47m9","MINI-w84g-p2j2-jfvv","MINI-w94r-wmjx-fhvj","MINI-w9cj-3h3x-h6gc","MINI-w9hw-2q95-mxw4","MINI-w9m6-2c98-8rqx","MINI-w9r9-fj3r-5245","MINI-w9xm-p3wr-cqqr","MINI-wc6r-gpjm-3fp3","MINI-wcvq-x63g-2hjr","MINI-wfc3-2hx6-7vqj","MINI-wfg4-57xx-x8wr","MINI-wfmv-w29m-649g","MINI-wfrp-mrv9-hw36","MINI-wg2g-pw68-gxq9","MINI-wgcp-cm4x-c6hw","MINI-wggf-fmgm-6436","MINI-wgqh-rmjw-3rfq","MINI-wgx6-r2wc-hcm7","MINI-whfv-g9r3-w7vx","MINI-whxr-96gw-c34w","MINI-wj64-hv6c-6f36","MINI-wm5v-r9hp-mwrm","MINI-wpmj-8xqq-7v36","MINI-wppf-vxcv-7pqc","MINI-wq3m-w6qg-g64g","MINI-wq49-97q4-v8fh","MINI-wq5q-r26w-cr4h","MINI-wqrm-r9vc-wmh3","MINI-wqw2-62f3-m94j","MINI-wr2q-x8hf-v54f","MINI-wr46-9pxw-vcp2","MINI-wrf7-59q5-7x56","MINI-wv53-44p2-fq2h","MINI-wv8f-9gww-fx7v","MINI-wv9f-62h8-p963","MINI-wwv7-5pxj-543p","MINI-wxq7-5qrf-9hc7","MINI-x2fm-8q77-cpj8","MINI-x2xg-5jvf-665m","MINI-x372-7r6m-5293","MINI-x3mr-6f6m-55pc","MINI-x3mw-x4v5-cv3v","MINI-x3q9-c9wf-56cv","MINI-x4qj-j5pq-57xw","MINI-x53f-jqj6-vwgr","MINI-x567-jx3q-gfcv","MINI-x7mr-q75m-2v4m","MINI-x7px-pmg5-mh33","MINI-x7qm-ch5x-88q7","MINI-x7v2-rg5c-2fm5","MINI-x8p7-ff83-q5rc","MINI-x8pq-8wp5-fcj3","MINI-x8x8-2r5g-wpp7","MINI-x9jj-xhh5-xqjx","MINI-x9pp-4hf8-4wvp","MINI-xc88-qrgh-69jm","MINI-xcgw-mvc7-2mw3","MINI-xcj7-h2vq-93c7","MINI-xf3f-4w63-5g7h","MINI-xggp-f376-m6fm","MINI-xj78-95rq-73fw","MINI-xm3h-9j46-wvj8","MINI-xm88-v33f-r8qx","MINI-xmq6-8678-2x7r","MINI-xmqj-8q84-jcwr","MINI-xpmp-m4g3-j9gc","MINI-xq78-99qh-vcr6","MINI-xqqj-mcmw-7qcm","MINI-xrg4-7w9m-5vvq","MINI-xrx6-hv66-rjfc","MINI-xw39-c3xq-75f7","MINI-xw68-4pqc-rwwh","MINI-xwcf-c3w5-qwf9","MINI-xwgw-xrq9-9jv7","MINI-xxph-m666-wmg6","MINI-xxvc-gv7j-777j","RHSA-2026:68550","SUSE-SU-2026:23619-1","SUSE-SU-2026:3883-1","SUSE-SU-2026:3928-1","UBUNTU-CVE-2026-41178","openSUSE-SU-2026:11493-1","openSUSE-SU-2026:11603-1","openSUSE-SU-2026:11604-1","openSUSE-SU-2026:11606-1","openSUSE-SU-2026:11608-1","openSUSE-SU-2026:11609-1","openSUSE-SU-2026:11610-1","openSUSE-SU-2026:11664-1","openSUSE-SU-2026:11668-1","openSUSE-SU-2026:11774-1","openSUSE-SU-2026:11775-1","openSUSE-SU-2026:11776-1","openSUSE-SU-2026:11847-1","openSUSE-SU-2026:12292-1","openSUSE-SU-2026:21674-1","openSUSE-SU-2026:21755-1","openSUSE-SU-2026:21787-1"],"analysis":{"component_type":"library","fix_type":"upgrade","impacts":["denial_of_service"],"network_reachable":"yes","non_default_config":false,"product_category":"Go OpenTelemetry library","requires_auth":"none","summary":"Attackers can cause denial of service by sending oversized baggage headers to applications using the affected OpenTelemetry-Go library.","user_interaction":"not_required","vuln_class":"denial_of_service"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"GitHub_M","cpe":[{"product":"opentelemetry","vendor":"opentelemetry"}],"cvss":{"score":5.3,"severity":"medium","source":"cna","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"cwes":[{"id":"CWE-789","name":"Memory Allocation with Excessive Size Value"}],"description":"OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via oversized inputs. Versions 1.42.0 and 1.44.0 fix the issue.","ecosystems":["Go","Red Hat:openshift:4.22::el8","Red Hat:openshift:4.22::el9","SUSE:Linux Enterprise Module for HPC 15 SP7","SUSE:Linux Enterprise Module for Package Hub 15 SP7","SUSE:Linux Enterprise Module for Public Cloud 12","SUSE:Linux Enterprise Server 16.0","SUSE:Linux Enterprise Server for SAP applications 16.0","openSUSE:Leap 16.0","openSUSE:Tumbleweed"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"weaponised"},"has_fix":true,"headline":"OpenTelemetry-Go's baggage parsing no longer caps raw header length","id":"CVE-2026-41178","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"Go","product":null,"products":[],"type":"denial_of_service","year":"2026"},"n_packages":39,"n_references":2,"next":{"headline":"RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution","id":"CVE-2026-41179"},"packages":[{"ecosystem":"Go","fixed":["1.42.0","1.44.0"],"introduced":["1.41.0","1.43.0"],"last_affected":[],"package":"go.opentelemetry.io/otel","purl":"pkg:golang/go.opentelemetry.io/otel","source":"GO-2026-5158"},{"ecosystem":"Go","fixed":["1.42.0"],"introduced":["1.41.0"],"last_affected":[],"package":"go.opentelemetry.io/otel/baggage","purl":null,"source":"GHSA-5wrp-cwcj-q835"},{"ecosystem":"Go","fixed":["1.42.0"],"introduced":["1.41.0"],"last_affected":[],"package":"go.opentelemetry.io/otel/baggage","purl":"pkg:golang/go.opentelemetry.io/otel/baggage","source":"GHSA-5wrp-cwcj-q835"},{"ecosystem":"Go","fixed":["1.44.0"],"introduced":["1.43.0"],"last_affected":[],"package":"go.opentelemetry.io/otel/baggage","purl":null,"source":"GHSA-5wrp-cwcj-q835"},{"ecosystem":"Go","fixed":["1.44.0"],"introduced":["1.43.0"],"last_affected":[],"package":"go.opentelemetry.io/otel/baggage","purl":"pkg:golang/go.opentelemetry.io/otel/baggage","source":"GHSA-5wrp-cwcj-q835"},{"ecosystem":"Go","fixed":["1.42.0"],"introduced":["1.41.0"],"last_affected":[],"package":"go.opentelemetry.io/otel/propagation","purl":null,"source":"GHSA-5wrp-cwcj-q835"},{"ecosystem":"Go","fixed":["1.42.0"],"introduced":["1.41.0"],"last_affected":[],"package":"go.opentelemetry.io/otel/propagation","purl":"pkg:golang/go.opentelemetry.io/otel/propagation","source":"GHSA-5wrp-cwcj-q835"},{"ecosystem":"Go","fixed":["1.44.0"],"introduced":["1.43.0"],"last_affected":[],"package":"go.opentelemetry.io/otel/propagation","purl":null,"source":"GHSA-5wrp-cwcj-q835"},{"ecosystem":"Go","fixed":["1.44.0"],"introduced":["1.43.0"],"last_affected":[],"package":"go.opentelemetry.io/otel/propagation","purl":"pkg:golang/go.opentelemetry.io/otel/propagation","source":"GHSA-5wrp-cwcj-q835"},{"ecosystem":"Red Hat:openshift:4.22::el8","fixed":["0:4.22.0-202609141614.p2.g160626b.assembly.stream.el8"],"introduced":["0"],"last_affected":[],"package":"openshift","purl":"pkg:rpm/redhat/openshift","source":"RHSA-2026:68550"},{"ecosystem":"Red Hat:openshift:4.22::el8","fixed":["0:4.22.0-202609141614.p2.g160626b.assembly.stream.el8"],"introduced":["0"],"last_affected":[],"package":"openshift-hyperkube","purl":"pkg:rpm/redhat/openshift-hyperkube","source":"RHSA-2026:68550"},{"ecosystem":"Red Hat:openshift:4.22::el9","fixed":["0:4.22.0-202609141614.p2.g160626b.assembly.stream.el9"],"introduced":["0"],"last_affected":[],"package":"openshift","purl":"pkg:rpm/redhat/openshift","source":"RHSA-2026:68550"},{"ecosystem":"Red Hat:openshift:4.22::el9","fixed":["0:4.22.0-202609141614.p2.g160626b.assembly.stream.el9"],"introduced":["0"],"last_affected":[],"package":"openshift-hyperkube","purl":"pkg:rpm/redhat/openshift-hyperkube","source":"RHSA-2026:68550"},{"ecosystem":"Red Hat:openshift:4.22::el9","fixed":["0:4.22.0-202609141614.p2.g160626b.assembly.stream.el9"],"introduced":["0"],"last_affected":[],"package":"openshift-kube-apiserver","purl":"pkg:rpm/redhat/openshift-kube-apiserver","source":"RHSA-2026:68550"},{"ecosystem":"Red Hat:openshift:4.22::el9","fixed":["0:4.22.0-202609141614.p2.g160626b.assembly.stream.el9"],"introduced":["0"],"last_affected":[],"package":"openshift-kube-controller-manager","purl":"pkg:rpm/redhat/openshift-kube-controller-manager","source":"RHSA-2026:68550"},{"ecosystem":"Red Hat:openshift:4.22::el9","fixed":["0:4.22.0-202609141614.p2.g160626b.assembly.stream.el9"],"introduced":["0"],"last_affected":[],"package":"openshift-kube-scheduler","purl":"pkg:rpm/redhat/openshift-kube-scheduler","source":"RHSA-2026:68550"},{"ecosystem":"Red Hat:openshift:4.22::el9","fixed":["0:4.22.0-202609141614.p2.g160626b.assembly.stream.el9"],"introduced":["0"],"last_affected":[],"package":"openshift-kubelet","purl":"pkg:rpm/redhat/openshift-kubelet","source":"RHSA-2026:68550"},{"ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP7","fixed":["1.5.3-150600.4.40.1"],"introduced":["0"],"last_affected":[],"package":"apptainer","purl":"pkg:rpm/suse/apptainer\u0026distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP7","source":"SUSE-SU-2026:3928-1"},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","fixed":["1.5.3-150600.4.40.1"],"introduced":["0"],"last_affected":[],"package":"apptainer","purl":"pkg:rpm/suse/apptainer\u0026distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7","source":"SUSE-SU-2026:3928-1"},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","fixed":["3.15-6.78.1"],"introduced":["0"],"last_affected":[],"package":"google-cloud-sap-agent","purl":"pkg:rpm/suse/google-cloud-sap-agent\u0026distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2012","source":"SUSE-SU-2026:3883-1"},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","fixed":["3.15-160000.3.1"],"introduced":["0"],"last_affected":[],"package":"google-cloud-sap-agent","purl":"pkg:rpm/suse/google-cloud-sap-agent\u0026distro=SUSE%20Linux%20Enterprise%20Server%2016.0","source":"SUSE-SU-2026:23619-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","fixed":["3.15-160000.3.1"],"introduced":["0"],"last_affected":[],"package":"google-cloud-sap-agent","purl":"pkg:rpm/suse/google-cloud-sap-agent\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0","source":"SUSE-SU-2026:23619-1"},{"ecosystem":"openSUSE:Leap 16.0","fixed":["1.5.3-bp160.3.1"],"introduced":["0"],"last_affected":[],"package":"apptainer","purl":"pkg:rpm/opensuse/apptainer\u0026distro=openSUSE%20Leap%2016.0","source":"openSUSE-SU-2026:21787-1"},{"ecosystem":"openSUSE:Leap 16.0","fixed":["1.14.7-bp160.1.1"],"introduced":["0"],"last_affected":[],"package":"coredns","purl":"pkg:rpm/opensuse/coredns\u0026distro=openSUSE%20Leap%2016.0","source":"openSUSE-SU-2026:21674-1"},{"ecosystem":"openSUSE:Leap 16.0","fixed":["3.15-160000.3.1"],"introduced":["0"],"last_affected":[],"package":"google-cloud-sap-agent","purl":"pkg:rpm/opensuse/google-cloud-sap-agent\u0026distro=openSUSE%20Leap%2016.0","source":"openSUSE-SU-2026:21755-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["1.300071.0-2.1"],"introduced":["0"],"last_affected":[],"package":"amazon-cloudwatch-agent","purl":"pkg:rpm/opensuse/amazon-cloudwatch-agent\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2026:11603-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["1.5.3-3.1"],"introduced":["0"],"last_affected":[],"package":"apptainer","purl":"pkg:rpm/opensuse/apptainer\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2026:11664-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["10.32.7-1.1"],"introduced":["0"],"last_affected":[],"package":"azure-storage-azcopy","purl":"pkg:rpm/opensuse/azure-storage-azcopy\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2026:11604-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["0.40.9-1.1"],"introduced":["0"],"last_affected":[],"package":"buildpacks-cli","purl":"pkg:rpm/opensuse/buildpacks-cli\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2026:11493-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["0.60.5-2.1"],"introduced":["0"],"last_affected":[],"package":"cadvisor","purl":"pkg:rpm/opensuse/cadvisor\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2026:11606-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["1.14.7-1.1"],"introduced":["0"],"last_affected":[],"package":"coredns","purl":"pkg:rpm/opensuse/coredns\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2026:11608-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["3.1.1-5.1"],"introduced":["0"],"last_affected":[],"package":"distribution","purl":"pkg:rpm/opensuse/distribution\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2026:11609-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["20260918.01-1.1"],"introduced":["0"],"last_affected":[],"package":"google-osconfig-agent","purl":"pkg:rpm/opensuse/google-osconfig-agent\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2026:11847-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["4.2.4-1.1"],"introduced":["0"],"last_affected":[],"package":"helm","purl":"pkg:rpm/opensuse/helm\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2026:11668-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["3.21.3-6.1"],"introduced":["0"],"last_affected":[],"package":"helm3","purl":"pkg:rpm/opensuse/helm3\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2026:11610-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["4.0.5-1.1"],"introduced":["0"],"last_affected":[],"package":"helmsman","purl":"pkg:rpm/opensuse/helmsman\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2026:12292-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["1.34.11-2.1"],"introduced":["0"],"last_affected":[],"package":"kubernetes1.34","purl":"pkg:rpm/opensuse/kubernetes1.34\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2026:11774-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["1.35.8-2.1"],"introduced":["0"],"last_affected":[],"package":"kubernetes1.35","purl":"pkg:rpm/opensuse/kubernetes1.35\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2026:11775-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["1.36.4-2.1"],"introduced":["0"],"last_affected":[],"package":"kubernetes1.36","purl":"pkg:rpm/opensuse/kubernetes1.36\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2026:11776-1"}],"prev":{"headline":"Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction","id":"CVE-2026-41177"},"products":["go.opentelemetry.io/otel/baggage","go.opentelemetry.io/otel/propagation"],"published":"2026-06-04","related":[{"cvss_score":7.5,"headline":"OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)","id":"CVE-2026-29181","kev_date_added":null,"published":"2026-04-07"},{"cvss_score":7.5,"headline":"DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics","id":"CVE-2023-47108","kev_date_added":null,"published":"2023-11-10"},{"cvss_score":7.5,"headline":"OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics","id":"CVE-2023-45142","kev_date_added":null,"published":"2023-10-12"},{"cvss_score":7.5,"headline":"opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics","id":"CVE-2023-43810","kev_date_added":null,"published":"2023-10-06"},{"cvss_score":7.3,"headline":"opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking","id":"CVE-2026-39883","kev_date_added":null,"published":"2026-04-08"},{"cvss_score":7,"headline":"OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking","id":"CVE-2026-24051","kev_date_added":null,"published":"2026-02-02"},{"cvss_score":5.9,"headline":"OpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path","id":"CVE-2026-41078","kev_date_added":null,"published":"2026-04-23"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"GitHub Advisory Database","prefix":"GHSA"},{"class":"attribution","licence":"CC BY 4.0","name":"Go Vulnerability Database","prefix":"GO"},{"class":"attribution","licence":"CC BY 4.0","name":"Red Hat","prefix":"RHSA"},{"class":"attribution","licence":"CC BY 4.0","name":"SUSE","prefix":"SUSE"},{"class":"attribution","licence":"CC BY 4.0","name":"SUSE","prefix":"openSUSE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"yes","exploitation":"poc","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-06-04","vendors":["open-telemetry"]},"summary":"Attackers can cause denial of service by sending oversized baggage headers to applications using the affected OpenTelemetry-Go library.","url":"https://insights.sbomify.com/CVE-2026-41178/"}