GO-2026-6258
OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access in go.opentelemetry.io/otel/bridge/opentracing
At a glance
- Published
- Updated
- CVE
- CVE-2026-45404
- Aliases
- GHSA-42cj-99w8-cp2p
Description
OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access in go.opentelemetry.io/otel/bridge/opentracing
Affected packages
| Package | Versions |
|---|---|
| Go · go.opentelemetry.io/otel/bridge/opentracing | introduced 0.11.0, fixed 1.45.0 |
References
- https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-42cj-99w8-cp2p ADVISORY
- https://github.com/open-telemetry/opentelemetry-go/commit/93a693edeed0e07ce5ebd1dfe67af42d1e2055d8 WEB
- https://github.com/open-telemetry/opentelemetry-go/pull/8693 WEB
- https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.45.0 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |