Advisories for Golang/Go.opentelemetry.io/Otel/Sdk/Log package

2026

OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full

A BatchingProcessor in go.opentelemetry.io/otel/sdk/log can enter a tight CPU loop when the asynchronous export buffer is full. Under exporter backpressure, attacker-driven high-volume log emission can keep the queue at or above the batch size, causing repeated immediate export retries and a denial of service through CPU exhaustion. Introduced in commit: 4af9c20