Skip to content

fix(security): remediate CVE vulnerabilities - #343

Merged
ulucinar merged 1 commit into
release-0.10from
fix/cve-remediation-release-0.10-20260811-133653
Aug 11, 2026
Merged

fix(security): remediate CVE vulnerabilities#343
ulucinar merged 1 commit into
release-0.10from
fix/cve-remediation-release-0.10-20260811-133653

Conversation

@ulucinar

Copy link
Copy Markdown
Collaborator

Summary

This PR fixes CVE vulnerabilities identified by security scanning.

Vulnerabilities Fixed

CVE/GHSA Severity Package Fixed Version
GO-2026-5158 Medium go.opentelemetry.io/otel v1.44.0

Changes Made

  • Updated go.opentelemetry.io/otel from v1.43.0 to v1.44.0
  • Updated go.opentelemetry.io/otel/trace from v1.43.0 to v1.44.0
  • Ran go mod tidy to update dependencies

References

Verification

  • Rescanned with cve-scan skill after fixes
  • All listed vulnerabilities resolved

- Update go.opentelemetry.io/otel to v1.44.0 (fixes GO-2026-5158)
- Update go.opentelemetry.io/otel/trace to v1.44.0 (fixes GO-2026-5158)

Signed-off-by: Alper Rifat Ulucinar <ulucinar@users.noreply.github.com>

@turkenf turkenf left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you @ulucinar, LGTM

@ulucinar
ulucinar merged commit 838db28 into release-0.10 Aug 11, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants