OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation

影響: pip:opentelemetry-propagator-jaeger <= 1.44.0 → 1.45.0

JaegerPropagator.extract() in opentelemetry-propagator-jaeger did not enforce limits when extracting inbound uberctx- baggage headers. Attacker-controlled baggage could cause unnecessary CPU work and short-lived heap allocations while processing more data than the propagator should accept. Impact Services that enable the optional Jaeger propagator and accept untrusted inbound propagation headers may experience increased per-request resource usage. This can contribute to denial-of-service risk w…

GitHub Advisory Database에서 읽기

2026. 10. 28. 오전 06:06, GitHub Advisory Database에서 "OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "보통"(medium)입니다. 관련 기술: Python. CVE: CVE-2026-116694.