You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We are currently using the latest 1.10.0 release. We got caught in a vulnerability scan which reports an issue with the module go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc.
Kindly fix this vulnerability. Please let me know when we can expect this to be fixed.
Security description:
High Vulnerability found in non-os package type (go-module) - go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc(cvss_v3_base_score=7.5)(GHSA-8pgv-569h-w5rw - GHSA-8pgv-569h-w5rw). otelgrpc DoS vulnerability due to unbound cardinality metrics Package paths: /usr/local/bin/vc-webhook-manager
Please describe your problem in detail
We are currently using the latest 1.10.0 release. We got caught in a vulnerability scan which reports an issue with the module go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc.
Kindly fix this vulnerability. Please let me know when we can expect this to be fixed.
Security description:
High Vulnerability found in non-os package type (go-module) - go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc(cvss_v3_base_score=7.5)(GHSA-8pgv-569h-w5rw - GHSA-8pgv-569h-w5rw). otelgrpc DoS vulnerability due to unbound cardinality metrics Package paths: /usr/local/bin/vc-webhook-manager
Advisory Link: GHSA-8pgv-569h-w5rw
Any other relevant information
No response
The text was updated successfully, but these errors were encountered: