area/securityhelp wantedrelease/v3.5release/v3.6
Repository metrics
- Stars
- (51,701 個のスター)
- PR merge metrics
- (平均マージ 6d 3h) (30d で 71 merged PRs)
説明
What would you like to be added?
The go.opentelemetry.io/otel has the CVE-2026-29181 high severity vulnerability reported. We have version 1.40.0 in both 3.5 and 3.6.
We should also bump go.opentelemetry.io/otel/sdk to 1.43.0, due to CVE-2026-39883.
We need to update the dependency, and add a CHANGELOG entry.
Why is this needed?
To address CVE-2026-29181 and CVE-2026-39883.