CVE-2023-47108

CVE-2023-47108 affects OpenTelemetry-Go Contrib versions 0.37.0 to 0.45.0, where the gRPC Unary Server Interceptor's default behavior of adding high-cardinality labels (net.peer.sock.addr, net.peer.sock.port) can lead to memory exhaustion. This vulnerability has a CVSS score of 7.5 (High), indicating a network-based attack with low complexity and high impact on availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.