CVE-2026-126360 | OpenTelemetry Python up to 1.45.1 TraceContextTextMapPropagator TraceContextTextMapPropagator.extract redos

November 13, 2026 Yanac

A vulnerability identified as problematic has been detected in OpenTelemetry Python up to 1.45.1. Affected by this vulnerability is the function TraceContextTextMapPropagator.extract of the component TraceContextTextMapPropagator. Performing a manipulation results in inefficient regular expression complexity.

This vulnerability is reported as CVE-2026-126360. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More