Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:nuget/OpenTelemetry.Api@1.1.0
Typenuget
Namespace
NameOpenTelemetry.Api
Version1.1.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.15.3
Latest_non_vulnerable_version1.15.3
Affected_by_vulnerabilities
0
url VCID-wsjz-93sc-euds
vulnerability_id VCID-wsjz-93sc-euds
summary OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1.15.2, The implementation details of the baggage, B3 and Jaeger processing code in the OpenTelemetry.Api and OpenTelemetry.Extensions.Propagators NuGet packages can allocate excessive memory when parsing which could create a potential denial of service (DoS) in the consuming application. This vulnerability is fixed in 1.15.3.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-40894
reference_id
reference_type
scores
0
value 0.00028
scoring_system epss
scoring_elements 0.08512
published_at 2026-06-14T12:55:00Z
1
value 0.00028
scoring_system epss
scoring_elements 0.08474
published_at 2026-06-11T12:55:00Z
2
value 0.00028
scoring_system epss
scoring_elements 0.08517
published_at 2026-06-13T12:55:00Z
3
value 0.00028
scoring_system epss
scoring_elements 0.08513
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-40894
1
reference_url https://github.com/open-telemetry/opentelemetry-dotnet
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/open-telemetry/opentelemetry-dotnet
2
reference_url https://github.com/open-telemetry/opentelemetry-dotnet/pull/3533
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/open-telemetry/opentelemetry-dotnet/pull/3533
3
reference_url https://github.com/open-telemetry/opentelemetry-dotnet/releases/tag/core-1.15.3
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/open-telemetry/opentelemetry-dotnet/releases/tag/core-1.15.3
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-40894
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-40894
5
reference_url https://github.com/open-telemetry/opentelemetry-dotnet/pull/1048
reference_id 1048
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-23T19:22:40Z/
url https://github.com/open-telemetry/opentelemetry-dotnet/pull/1048
6
reference_url https://github.com/open-telemetry/opentelemetry-dotnet/pull/3244
reference_id 3244
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-23T19:22:40Z/
url https://github.com/open-telemetry/opentelemetry-dotnet/pull/3244
7
reference_url https://github.com/open-telemetry/opentelemetry-dotnet/pull/3309
reference_id 3309
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-23T19:22:40Z/
url https://github.com/open-telemetry/opentelemetry-dotnet/pull/3309
8
reference_url https://github.com/open-telemetry/opentelemetry-dotnet/pull/533
reference_id 533
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-23T19:22:40Z/
url https://github.com/open-telemetry/opentelemetry-dotnet/pull/533
9
reference_url https://github.com/open-telemetry/opentelemetry-dotnet/pull/7061
reference_id 7061
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-23T19:22:40Z/
url https://github.com/open-telemetry/opentelemetry-dotnet/pull/7061
10
reference_url https://github.com/advisories/GHSA-g94r-2vxg-569j
reference_id GHSA-g94r-2vxg-569j
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-g94r-2vxg-569j
11
reference_url https://github.com/open-telemetry/opentelemetry-dotnet/security/advisories/GHSA-g94r-2vxg-569j
reference_id GHSA-g94r-2vxg-569j
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-23T19:22:40Z/
url https://github.com/open-telemetry/opentelemetry-dotnet/security/advisories/GHSA-g94r-2vxg-569j
fixed_packages
0
url pkg:nuget/OpenTelemetry.Api@1.15.3
purl pkg:nuget/OpenTelemetry.Api@1.15.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/OpenTelemetry.Api@1.15.3
aliases CVE-2026-40894, GHSA-g94r-2vxg-569j
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wsjz-93sc-euds
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:nuget/OpenTelemetry.Api@1.1.0