Update OpenTelemetry package to patch security

planetarium / NineChronicles.Headless

A headless node of NineChronicles game network, powered by Libplanet.

GNU Affero General Public License v3.0

36 stars 38 forks source link

Closed greymistcube closed 5 months ago

greymistcube commented 5 months ago

See #2452 for context.

Seems like we've been mostly using RC versions of OpenTelemetry and its related packages.
All versions prior to 1.8.1 for OpenTelemetry.Instrumentation.AspNetCore are vulnerable.

To resolve the issue, the packages need updating.