go package report

Is go.opentelemetry.io/contrib/instrumentation/github.com/astaxie/beego/otelbeego safe?

1 known vulnerability, worst severity HIGH.

cvss
7.5

how bad it is if exploited, out of 10

epss
1.0%

chance of exploitation in the next 30 days

xyz score
3.4

CyberXYZ composite, out of 10

fig. 01 — GHSA-5r5m-65gx-7vrh, the advisory selected below

// advisories

GHSA-5r5m-65gx-7vrh

HIGHCVE-2023-25151

The [v0.38.0](https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.13.0) release of [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/463c2e7cd69d25f40b0a595b05394eeb26c68ae2/instrumentation/net/http/otelhttp/handler.go#L218) uses the [httpconv.ServerRequest](https://github.com/open-telemetry/opente

Affected
>= 0.38.0, < 0.39.0
Fixed in
0.39.0
Weakness
CWE-400
Published
2023-02-08
Source
github

GHSANVDMITREreferencereference

// dependencies

0 direct

Sign in for dependency paths and remediation

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so go packages are not covered.

Checked 2026-09-22 at 00:56 UTC. The most recent advisory here was published 2023-02-08. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Think a verdict here is wrong? Tell us — we respond within 2 business days.
Is go.opentelemetry.io/contrib/instrumentation/github.com/astaxie/beego/otelbeego safe? go package security report | CyberXYZ