Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17, `go.opentelemetry.io/otel/schema/v1.0` and `go.opentelemetry.io/otel/schema/v1.1` leaks one file descriptor on each successful `ParseFile` call. `ParseFile` opens the schema file and passes it to `Parse` without closing it; repeated parsing in a long-running process can exhaust the process file descriptor limit and cause denial of service. Exploitation depends on a consuming application exposing repeated schema parsing to an attacker-controlled path. Version 0.0.17 contains a patch for the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
O CVE-2026-45287 afeta o Alertmanager no #Fedora 43: vazamento de descritores de arquivo pode causar DoS. Versão 0.33.0 corrige. Saiba mais: -> http://tinyurl.com/238s65k5 https://t.co/AdjqOJnsts
Post summary
CVE‑2026‑45287 causes a file descriptor leak in Alertmanager on Fedora 43 that can lead to denial of service. The issue is fixed in version 0.33.0, and the tweet directs readers to vendor documentation for details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | opentelemetry | telemetry_schema_files | - | go | - |