Threats tagged 'ghsa-55m9-299j-53c7'

The OpenTelemetry.Exporter.OneCollector exporter reads HTTP response bodies without an upper size limit when receiving non-successful HTTP status codes (4xx or 5xx). This can lead to unbounded memory consumption if the response body is extremely large, potentially causing memory exhaustion and application crashes. The vulnerability affects versions prior to 1.15.1 and is fixed in version 1.15.1.