[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-45287":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":85,"aliases":86,"duplicate_of":9,"upstream":89,"downstream":90,"duplicates":115,"related":116,"reserved_at":9,"published_at":117,"modified_at":118,"state":119,"summary":120,"references_raw":128,"kevs":156,"epss":157,"epss_history":160,"metrics":255,"affected":264},"CVE-2026-45287","OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17, `go.opentelemetry.io/otel/schema/v1.0` and `go.opentelemetry.io/otel/schema/v1.1` leaks one file descriptor on each successful `ParseFile` call. `ParseFile` opens the schema file and passes it to `Parse` without closing it; repeated parsing in a long-running process can exhaust the process file descriptor limit and cause denial of service. Exploitation depends on a consuming application exposing repeated schema parsing to an attacker-controlled path. Version 0.0.17 contains a patch for the issue.",null,[11,78],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-772","Missing Release of Resource after Effective Lifetime","The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.","weakness","Draft","Base","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-469","HTTP DoS",[24],{"id":25,"name":26,"tactics":27,"countermeasures":31},"T1499.002","Service Exhaustion Flood",[28],{"id":29,"name":30},"TA0105","Impact",[32,37,41,45,49,53,57,61,65,69,74],{"id":33,"name":34,"tactic":35},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":36},"Detect",{"id":38,"name":39,"tactic":40},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":36},{"id":42,"name":43,"tactic":44},"D3-CSPP","Client-server Payload Profiling",{"name":36},{"id":46,"name":47,"tactic":48},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":36},{"id":50,"name":51,"tactic":52},"D3-NTSA","Network Traffic Signature Analysis",{"name":36},{"id":54,"name":55,"tactic":56},"D3-APCA","Application Protocol Command Analysis",{"name":36},{"id":58,"name":59,"tactic":60},"D3-NTCD","Network Traffic Community Deviation",{"name":36},{"id":62,"name":63,"tactic":64},"D3-RTSD","Remote Terminal Session Detection",{"name":36},{"id":66,"name":67,"tactic":68},"D3-ISVA","Inbound Session Volume Analysis",{"name":36},{"id":70,"name":71,"tactic":72},"D3-NTF","Network Traffic Filtering",{"name":73},"Isolate",{"id":75,"name":76,"tactic":77},"D3-ITF","Inbound Traffic Filtering",{"name":73},{"_key":79,"id":79,"name":80,"description":81,"type":15,"status":82,"abstraction":83,"likelihood_of_exploit":9,"capec":84},"CWE-775","Missing Release of File Descriptor or Handle after Effective Lifetime","The product does not release a file descriptor or handle after its effective lifetime has ended, i.e., after the file descriptor/handle is no longer needed.","Incomplete","Variant",[],[],[87,88],"GHSA-995v-fvrw-c78m","GO-2026-5281",[],[91,93,95,97,99,101,103,105,107,109,111,113],{"_key":92},"DEBIAN-CVE-2026-45287",{"_key":94},"UBUNTU-CVE-2026-45287",{"_key":96},"RHSA-2026:15859",{"_key":98},"RHSA-2026:15862",{"_key":100},"RHSA-2026:21399",{"_key":102},"RHSA-2026:23263",{"_key":104},"RHSA-2026:24577",{"_key":106},"RHSA-2026:25137",{"_key":108},"RHSA-2026:25138",{"_key":110},"RHSA-2026:25238",{"_key":112},"RHSA-2026:25535",{"_key":114},"RHSA-2026:7420",[],[],"2026-06-04T14:45:54.522Z","2026-06-08T18:27:46.212Z","Awaiting Analysis",{"cisa_kev":121,"cisa_ransomware":121,"cisa_vendor":9,"epss_severity":122,"epss_score":123,"severity":122,"severity_score":124,"severity_version":125,"severity_source":126,"severity_vector":127,"severity_status":119},false,"low",0.00168,2.1,"v4.0","cve.org","CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",[129,138,143,148,152],{"url":130,"sources":131,"tags":134},"https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-995v-fvrw-c78m",[132,126,133],"osv_go","nvd",[135,136,137],"WEB","X Refsource CONFIRM","Advisory",{"url":139,"sources":140,"tags":141},"https://github.com/open-telemetry/opentelemetry-go",[132],[142],"PACKAGE",{"url":144,"sources":145,"tags":146},"https://github.com/open-telemetry/opentelemetry-go/commit/e72a235518cb773137efd80336a179028bc34684",[126,133,132],[147,135],"X Refsource MISC",{"url":149,"sources":150,"tags":151},"https://github.com/open-telemetry/opentelemetry-go/commit/f12d198f161b61735d65705248715aa97021ba8d",[126,133,132],[147,135],{"url":153,"sources":154,"tags":155},"https://nvd.nist.gov/vuln/detail/CVE-2026-45287",[132],[137],[],{"date":158,"score":123,"percentile":159},"2026-07-05",0.06375,[161,165,168,171,174,177,181,184,187,190,193,197,200,203,206,210,213,216,219,222,225,228,231,234,237,240,243,246,249,251,254],{"date":162,"score":163,"percentile":164},"2026-06-05",0.00013,0.02148,{"date":166,"score":163,"percentile":167},"2026-06-06",0.02154,{"date":169,"score":163,"percentile":170},"2026-06-07",0.02141,{"date":172,"score":163,"percentile":173},"2026-06-08",0.02129,{"date":175,"score":163,"percentile":176},"2026-06-09",0.02123,{"date":178,"score":179,"percentile":180},"2026-06-10",0.00017,0.04333,{"date":182,"score":179,"percentile":183},"2026-06-11",0.04352,{"date":185,"score":179,"percentile":186},"2026-06-12",0.04357,{"date":188,"score":179,"percentile":189},"2026-06-13",0.04345,{"date":191,"score":179,"percentile":192},"2026-06-14",0.04344,{"date":194,"score":195,"percentile":196},"2026-06-15",0.00179,0.07574,{"date":198,"score":195,"percentile":199},"2026-06-16",0.07589,{"date":201,"score":195,"percentile":202},"2026-06-17",0.07581,{"date":204,"score":195,"percentile":205},"2026-06-18",0.07576,{"date":207,"score":208,"percentile":209},"2026-06-19",0.00175,0.07191,{"date":211,"score":208,"percentile":212},"2026-06-20",0.07182,{"date":214,"score":208,"percentile":215},"2026-06-21",0.07171,{"date":217,"score":208,"percentile":218},"2026-06-22",0.07147,{"date":220,"score":123,"percentile":221},"2026-06-23",0.06306,{"date":223,"score":123,"percentile":224},"2026-06-24",0.06315,{"date":226,"score":123,"percentile":227},"2026-06-25",0.06353,{"date":229,"score":123,"percentile":230},"2026-06-26",0.06381,{"date":232,"score":123,"percentile":233},"2026-06-27",0.06395,{"date":235,"score":123,"percentile":236},"2026-06-28",0.06394,{"date":238,"score":123,"percentile":239},"2026-06-29",0.06388,{"date":241,"score":123,"percentile":242},"2026-06-30",0.06383,{"date":244,"score":123,"percentile":245},"2026-07-01",0.0639,{"date":247,"score":123,"percentile":248},"2026-07-02",0.06384,{"date":250,"score":123,"percentile":159},"2026-07-03",{"date":252,"score":123,"percentile":253},"2026-07-04",0.06377,{"date":158,"score":123,"percentile":159},[256,258,261],{"source":132,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":257},{"baseScore":124,"baseSeverity":9,"vectorString":127,"impactScore":9,"exploitabilityScore":9},{"source":126,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":259},{"baseScore":124,"baseSeverity":260,"vectorString":127,"impactScore":9,"exploitabilityScore":9},"LOW",{"source":133,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":262},{"baseScore":124,"baseSeverity":260,"vectorString":263,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[265,278,283,288,294],{"ecosystem":266,"name":267,"vendor":268,"product":269,"cpe_part":9,"purl_type":270,"purl_namespace":268,"purl_name":269,"source":9,"versions":271},"Go","go.opentelemetry.io/otel/schema","go.opentelemetry.io/otel","schema","golang",[272],{"version":273,"is_range":274,"range_type":275,"version_start":9,"version_start_type":9,"version_end":276,"version_end_type":277,"fixed_in":9},"lt0_0_17",true,"semver","0.0.17","excluding",{"ecosystem":266,"name":279,"vendor":267,"product":280,"cpe_part":9,"purl_type":270,"purl_namespace":267,"purl_name":280,"source":9,"versions":281},"go.opentelemetry.io/otel/schema/v1.0","v1.0",[282],{"version":273,"is_range":274,"range_type":275,"version_start":9,"version_start_type":9,"version_end":276,"version_end_type":277,"fixed_in":9},{"ecosystem":266,"name":284,"vendor":267,"product":285,"cpe_part":9,"purl_type":270,"purl_namespace":267,"purl_name":285,"source":9,"versions":286},"go.opentelemetry.io/otel/schema/v1.1","v1.1",[287],{"version":273,"is_range":274,"range_type":275,"version_start":9,"version_start_type":9,"version_end":276,"version_end_type":277,"fixed_in":9},{"ecosystem":9,"name":279,"vendor":289,"product":279,"cpe_part":290,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":291},"open-telemetry","a",[292],{"version":293,"is_range":274,"range_type":126,"version_start":9,"version_start_type":9,"version_end":276,"version_end_type":277,"fixed_in":9},"\u003C 0.0.17",{"ecosystem":9,"name":284,"vendor":289,"product":284,"cpe_part":290,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":295},[296],{"version":293,"is_range":274,"range_type":126,"version_start":9,"version_start_type":9,"version_end":276,"version_end_type":277,"fixed_in":9}]