Vulnerability in Open-telemetry Go.opentelemetry.io/otel/schema/v1.0
CVE-2026-45287
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17, `go.opentelemetry.io/otel/schema/v1.0` and `go.opentelemetry.io/otel/schema/v1.1` leaks one file descriptor on each successful `ParseFile` call. `ParseFil…
Affected products
- Open-telemetry Go.opentelemetry.io/otel/schema/v1.0 — versions < 0.0.17
- Open-telemetry Go.opentelemetry.io/otel/schema/v1.1 — versions < 0.0.17
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)