Vulnerability Report: GO-2023-2113

Affected Packages

• Path
  Versions
  Symbols
• go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful/internal/semconvutil
  before v0.44.0
  • HTTPClientRequest
  • HTTPServerRequest
• go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin/internal/semconvutil
  before v0.44.0
  • HTTPClientRequest
  • HTTPServerRequest
• go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux/internal/semconvutil
  before v0.44.0
  • HTTPClientRequest
  • HTTPServerRequest
• go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho/internal/semconvutil
  before v0.44.0
  • HTTPClientRequest
  • HTTPServerRequest
• go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron/internal/semconvutil
  before v0.44.0
  • HTTPClientRequest
  • HTTPServerRequest
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace/internal/semconvutil
  before v0.44.0
  • HTTPClientRequest
  • HTTPServerRequest
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  before v0.44.0
  all symbols

Aliases

• CVE-2023-45142
• GHSA-rcjv-mgp8-qvmr

References

• https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
• https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
• https://vuln.go.dev/ID/GO-2023-2113.json

Feedback