Threats Tagged 'cleanstart-2026-un60914'

CVE-2026-29181 is a denial of service vulnerability in OpenTelemetry-Go, the Go implementation of OpenTelemetry. An attacker can exploit this flaw by sending multiple crafted 'baggage' HTTP header lines, causing excessive CPU and memory consumption. This vulnerability affects the multicluster engine for Kubernetes and related components, potentially rendering services unavailable. The issue is addressed in the etcd-3.6.13-1.1 package on openSUSE Tumbleweed and is relevant to certain SUSE product versions. The vulnerability is rated medium severity.