StackRadar

CVE-2026-24051

High

Advisory

Published 2 Feb 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
549
of 17,781 indexed, latest versions
Container images
555
deployed by those charts
Fix available
1 of 1
affected package

OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking

Carried by container images the latest versions of 549 of 17,781 indexed charts deploy, on 555 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.21.0, v1.22.0, v1.23.0, v1.23.1+16 more1.40.0555
OSV records
GHSA-9h8m-3fm2-qjrq
Also known as
GO-2026-4394

Charts affected

549 by stars
ChartLatestAffected imagesRadar Score
prometheus-operatormesosphere12.11.132 of 8See more

prometheus-operator mesosphere 12.11.13

2 of the 8 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0

Open the chart page →

11,689
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
go.opentelemetry.io/otel/sdk@v1.27.0
1.40.0

Open the chart page →

3,283
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
go.opentelemetry.io/otel/sdk@v1.27.0
1.40.0

Open the chart page →

4,603
kube-prometheus-stackmesosphere-stable75.9.12 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

2 of the 7 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/grafana:12.0.2b5b59bfc7561
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

10,180
mw-autoinstrumentationmiddleware-labsVerified publisher1.2.62 of 6See more

mw-autoinstrumentation middleware-labs 1.2.6

2 of the 6 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0

Open the chart page →

3,713
cognativemyaVerified publisher0.2403.32 of 3See more

cognative mya 0.2403.3

2 of the 3 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/grafana:10.4.0f9811e4e687f
go.opentelemetry.io/otel/sdk@v1.22.0
1.40.0
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
go.opentelemetry.io/otel/sdk@v1.24.0
1.40.0

Open the chart page →

7,309
jupyterhub-metricsncsaVerified publisher1.3.01 of 5See more

jupyterhub-metrics ncsa 1.3.0

1 of the 5 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

4,132
neosyncneosyncVerified publisher0.5.412 of 3See more

neosync neosync 0.5.41

2 of the 3 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

7,184
apineosync-apiVerified publisher0.5.411 of 1See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

2,819
workerneosync-workerVerified publisher0.5.411 of 1See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

2,796
agent-control-cdnewrelic1.0.01 of 3See more

agent-control-cd newrelic 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

5,034
cert-managernicklasfrahm-cert-managerVerified publisher0.1.22 of 4See more

cert-manager nicklasfrahm-cert-manager 0.1.2

2 of the 4 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.18.281316365dc0b
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
quay.io/jetstack/cert-manager-webhook:v1.18.29431f0d8b510
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

2,824
metrics-servernicklasfrahm-metrics-serverVerified publisher0.1.11 of 1See more

metrics-server nicklasfrahm-metrics-server 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

785
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
go.opentelemetry.io/otel/sdk@v1.32.0
1.40.0

Open the chart page →

6,854
cosmoshub-rpcnodeifyVerified publisher1.0.71 of 2See more

cosmoshub-rpc nodeify 1.0.7

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0

Open the chart page →

2,006
cosmos-nodenodeifyVerified publisher2.6.01 of 2See more

cosmos-node nodeify 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0

Open the chart page →

2,006
firehose-corenodeifyVerified publisher1.2.61 of 2See more

firehose-core nodeify 1.2.6

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

6,455
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0

Open the chart page →

5,565
substreams-tier-2nodeifyVerified publisher1.1.31 of 1See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

4,674
grafananodepulse7.1.01 of 1See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/grafana:10.2.36b5b37eb35bb
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0

Open the chart page →

2,966
lensoci-ai-incubations0.1.143 of 16See more

lens oci-ai-incubations 0.1.14

3 of the 16 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
go.opentelemetry.io/otel/sdk@v1.29.0
1.40.0
grafana/grafana:12.1.1a1701c218024
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

17,070
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0

Open the chart page →

2,346
dynamic-scoring-frameworkocm-helm-chartsVerified publisher0.1.02 of 2See more

dynamic-scoring-framework ocm-helm-charts 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/dynamic-scoring-addon:latest7e571a08ec1a
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
quay.io/open-cluster-management/dynamic-scoring-controller:latest587f5bc8f2ed
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0

Open the chart page →

967
kueue-addonocm-helm-chartsVerified publisher0.1.41 of 1See more

kueue-addon ocm-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/kueue-addon:v0.1.47f728514fead
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

1,563
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
go.opentelemetry.io/otel/sdk@v1.31.0
1.40.0

Open the chart page →

6,037
onyx-stackonyx0.3.12 of 12See more

onyx-stack onyx 0.3.1

2 of the 12 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.17.272dc058e478d
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

6,338
headroom-controlleropenfaas0.1.71 of 1See more

headroom-controller openfaas 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/headroom-controller:v0.0.467d587cc2c39
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

240
kruise-gameopenkruise1.1.01 of 1See more

kruise-game openkruise 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0

Open the chart page →

911
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0

Open the chart page →

5,017
openlit-operatoropenlit0.2.21 of 1See more

openlit-operator openlit 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

851
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0

Open the chart page →

2,525
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0

Open the chart page →

4,127
kubedb-certifiedopenshift2026.7.101 of 8See more

kubedb-certified openshift 2026.7.10

1 of the 8 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

4,016
kubestash-certifiedopenshift2026.7.101 of 2See more

kubestash-certified openshift 2026.7.10

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

1,090
voyager-gatewayopenshift2026.1.152 of 2See more

voyager-gateway openshift 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0

Open the chart page →

2,567
agentoptimizely-agentVerified publisher1.4.01 of 1See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
optimizely/agent:4.0.09d0096cabd63
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0

Open the chart page →

1,213
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.02 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
go.opentelemetry.io/otel/sdk@v1.30.0
1.40.0
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

71,208
pgaot-container-kit1.0.31 of 6See more

pga ot-container-kit 1.0.3

1 of the 6 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
go.opentelemetry.io/otel/sdk@v1.26.0
1.40.0

Open the chart page →

5,137
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
go.opentelemetry.io/otel/sdk@v1.27.0
1.40.0

Open the chart page →

5,411
adotowan-charts0.1.01 of 1See more

adot owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
go.opentelemetry.io/otel/sdk@v1.32.0
1.40.0

Open the chart page →

1,016
arpap2p-avs0.1.31 of 2See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
go.opentelemetry.io/otel/sdk@v1.25.0
1.40.0

Open the chart page →

1,980
automatap2p-avs0.1.01 of 2See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/automata-network/multi-prover-avs/operator:v0.6.0752f1aa02438
go.opentelemetry.io/otel/sdk@v1.27.0
1.40.0

Open the chart page →

3,621
parcaparca4.19.01 of 2See more

parca parca 4.19.0

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0

Open the chart page →

3,350
parcaparca-rr0.1.02 of 2See more

parca parca-rr 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.24.23776500fde82
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0

Open the chart page →

2,366
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0

Open the chart page →

4,120
cloudflaredpascaliskeVerified publisher3.0.01 of 1See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

2,028
pax-prometheuspaxtecnologia0.7.01 of 8See more

pax-prometheus paxtecnologia 0.7.0

1 of the 8 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0

Open the chart page →

1,826
archive-analysispcp-helm-chartsVerified publisher1.0.11 of 1See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0

Open the chart page →

1,326
pmm-ha-dependenciespercona1.0.03 of 4See more

pmm-ha-dependencies percona 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.25.41d6f18dbd599
go.opentelemetry.io/otel/sdk@v1.24.0
1.40.0
altinity/metrics-exporter:0.25.46ecf67edfb71
go.opentelemetry.io/otel/sdk@v1.24.0
1.40.0
percona/percona-postgresql-operator:2.8.06cce2698d3f5
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0

Open the chart page →

2,431
pet-battle-nsffpetbattle0.0.21 of 4See more

pet-battle-nsff petbattle 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

3,678

Container images carrying it

555 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
envoyproxy/ratelimit:a90e0e5d5966cbc14d5d
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
1
ethpandaops/rpc-snooper:latestc0b30fcf64bc
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
1
ethpandaops/xatu-cbt-api:latestf7dec2e07091
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
1
falcosecurity/falcosidekick:2.32.01976da721518
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
1
fatliverfreddy/cyphernetes-operator:lateste79f24ca7371
go.opentelemetry.io/otel/sdk@v1.29.0
1.40.0
1
federid/webhook:0.1.0fbfb7c6510a7
go.opentelemetry.io/otel/sdk@v1.31.0
1.40.0
1
flanksource/batch-runner:v1.0.44689687a7cf95
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
1
fleetdm/fleet:v4.66.012e644b7f40e
go.opentelemetry.io/otel/sdk@v1.31.0
1.40.0
1
gdxbsv/traktor:0.0.17675693335054
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
go.opentelemetry.io/otel/sdk@v1.31.0
1.40.0
1
goharbor/harbor-core:v2.11.1c017dd84ee96
go.opentelemetry.io/otel/sdk@v1.26.0
1.40.0
1
grafana/agent:v0.44.23364714a2f64
go.opentelemetry.io/otel/sdk@v1.24.0
1.40.0
1
grafana/agent:v0.40.3f6cbec9409be
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0
1
grafana/alloy:v1.5.101a63f4e032c
go.opentelemetry.io/otel/sdk@v1.31.0
1.40.0
1
grafana/alloy:v1.4.306bdcbb51fc2
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
1
grafana/alloy:v1.11.38c7256f412fe
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
1
grafana/alloy:v1.1.1c3dac4e26471
go.opentelemetry.io/otel/sdk@v1.25.0
1.40.0
1
grafana/alloy:v1.14.0f50931848bd8
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
1
grafana/beyla:1.3.336d07f8d276e
go.opentelemetry.io/otel/sdk@v1.23.1
1.40.0
1
grafana/grafana:12.2.22ebef928d7e5
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
1
grafana/grafana:12.2.135c41e0fd029
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
1
grafana/grafana:11.2.2-security-01464eac539793
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
1
grafana/grafana:11.5.15781759b3d27
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
1
grafana/grafana:11.6.062d2b9d20a19
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0
1
grafana/grafana:10.2.36b5b37eb35bb
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0
1
grafana/grafana:12.3.070d9599b186c
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
1
grafana/grafana:12.2.074144189b384
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
1
grafana/grafana:10.3.38640e5038e83
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0
1
grafana/grafana:11.5.28b37a2f028f1
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
1
grafana/grafana:12.1.1a1701c218024
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
1
grafana/grafana:10.4.19a9043254ba16
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
1
grafana/grafana:11.1.3b23b588cf7cb
go.opentelemetry.io/otel/sdk@v1.27.0
1.40.0
1
grafana/grafana:12.0.2b5b59bfc7561
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
1
grafana/grafana:12.3.2ba93c9d192e5
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
1
grafana/grafana:10.4.0f9811e4e687f
go.opentelemetry.io/otel/sdk@v1.22.0
1.40.0
1
grafana/grafana:11.3.1fa801ab6e1ae
go.opentelemetry.io/otel/sdk@v1.29.0
1.40.0
1
grafana/loki:3.6.5847c287ada0e
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
1
grafana/loki:3.2.0882e30c20683
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
1
grafana/loki:3.3.28af2de1abbdd
go.opentelemetry.io/otel/sdk@v1.29.0
1.40.0
1
grafana/loki:3.6.192bd5700577b
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
1
grafana/loki:3.6.3cd6e176883a9
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
1
grafana/loki-canary:3.6.5fbb984bab741
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
1
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
1
grafana/promtail:3.6.18dcfdf466da0
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
1
grafana/tempo:2.6.0f55a8a1937ff
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
1
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
1
hashicorp/terraform:1.9.7b77efab1a448
go.opentelemetry.io/otel/sdk@v1.24.0
1.40.0
1
hashicorp/vault:1.19.0bbb7f98dc67d
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.