Kurt Grutzmacher

If we forget about reserved addresses the logical total IPv4 count is 4,294,967,296 (2^32). Consider that an IPv6 /64 can have a quintillion hosts (18,446,744,073,709,551,616 or 2^64) this would be...

Looks like it's an indirect import from the module `go.opentelemetry.io/otel`: https://github.com/go-graphite/go-carbon/blob/master/go.sum#L55-L56 https://github.com/go-graphite/go-carbon/blob/master/vendor/go.opentelemetry.io/otel/exporters/trace/jaeger/internal/gen-go/jaeger/agent.go#L11 Code vuln scanners generally find these deep things and flag them even when you're not using it.

Based on the first line of the Apache issue tied to the CVE, using this version of the library isn't the problem as it's on the server side not handling...