area/securityhelp wantedrelease/v3.5release/v3.6
倉庫指標
- 星標
- (51,701 顆星)
- PR 合併指標
- (PR 指標待抓取)
描述
What would you like to be added?
The go.opentelemetry.io/otel has the CVE-2026-29181 high severity vulnerability reported. We have version 1.40.0 in both 3.5 and 3.6.
We should also bump go.opentelemetry.io/otel/sdk to 1.43.0, due to CVE-2026-39883.
We need to update the dependency, and add a CHANGELOG entry.
Why is this needed?
To address CVE-2026-29181 and CVE-2026-39883.