CVE-2026-41178 | Vulnetix

CVE-2026-41178 PUBLISHED CVSS 5.300000190734863 MEDIUM

opentelemetry-go's baggage parsing no longer caps raw header length

EPSS 0.34% · 27.0th percentile

Risk Scores

CVSS 3.1

5.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS Score

0.34%

27.0th percentile

Vendor	Product	Versions
chainguard	teleport-operator-fips-16	0, 0, 0
chainguard	knative-operator-1.21	0, 0, 0
wolfi	restic	0, 0, 0
chainguard	node-feature-discovery-0.18	0, 0, 0
chainguard	kubevirt-cdi-operator-1.6	, , *
chainguard	neuvector-scanner	0, 0, 0
wolfi	falcoctl	0, 0, 0
chainguard	azurefile-csi-fips-1.33	0, 0, 0
chainguard	gitlab-cng-19.1	0, 0, 0
chainguard	commercial-expanso-edge	0, 0, 0
chainguard	goose-fips	0, 0, 0
go.opentelemetry.io	otel/propagation	1.43.0, 1.41.0, 1.43.0
wolfi	kubernetes-csi-node-driver-registrar-2.17	0, 0, 0
chainguard	vault-1.16	0, 0, 0
wolfi	kubernetes-csi-driver-hostpath	0, 0, 0
chainguard	dapr-1.17	0, 0, 0
chainguard	crossplane-provider-aws-sagemaker	, , *
chainguard	cloud-provider-azure-1.34	0, 0, 0
chainguard	image-factory	0, 0, 0
chainguard	aws-ebs-csi-driver-1.58	, , *

…and 1705 more