CVE-2023-45142

CVE-2023-45142 is a high-severity denial-of-service vulnerability affecting OpenTelemetry-Go Contrib versions prior to 0.44.0. It arises from the otelhttp.NewHandler wrapper collecting unbound cardinality labels for http.user_agent and http.method, allowing an attacker to exhaust server memory with crafted requests. The vulnerability has a CVSS score of 7.5 (HIGH) due to its network attack vector, low attack complexity, and high impact on availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.