StackRadar

CVE-2026-39882

Medium

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
286
of 17,781 indexed, latest versions
Container images
274
deployed by those charts
Fix available
3 of 3
affected packages

opentelemetry-go: OTLP HTTP exporters read unbounded HTTP response bodies

Carried by container images the latest versions of 286 of 17,781 indexed charts deploy, on 274 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpgolangv1.0.0, v1.3.0, v1.4.1, v1.6.3+35 more1.43.0253
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttpgolangv0.31.0, v0.36.0, v0.39.0, v0.40.0+23 more1.43.0123
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttpgolangv0.4.0, v0.5.0, v0.6.0, v0.7.0+10 more0.19.066
OSV records
GHSA-w8rr-5gcm-pp58
Also known as
GO-2026-4985

Charts affected

286 by stars
ChartLatestAffected imagesRadar Score
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.14.0
1.43.0

Open the chart page →

2,576
elchi-stackelchi1.13.02 of 10See more

elchi-stack elchi 1.13.0

2 of the 10 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
grafana/grafana:12.2.074144189b384
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.12.2
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0
0.19.0
1.43.0
1.43.0
otel/opentelemetry-collector-contrib:0.89.0995f17004231
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v0.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.20.0
1.43.0
1.43.0

Open the chart page →

15,383
gateboardgateboard1.12.51 of 1See more

gateboard gateboard 1.12.5

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
udhos/gateboard:1.12.53acc0e7599bf
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
1.43.0

Open the chart page →

1,463
gateboard-discoverygateboard1.9.51 of 1See more

gateboard-discovery gateboard 1.9.5

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
udhos/gateboard-discovery:1.9.55567c9363c4c
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
1.43.0

Open the chart page →

1,190
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.27.0
1.43.0

Open the chart page →

16,346
go-hello-world-chartgo-hello-worldVerified publisher1.8.31 of 1See more

go-hello-world-chart go-hello-world 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/wasilak/go-hello-world:1.8.366d353e7693f
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.14.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
0.19.0
1.43.0
1.43.0

Open the chart page →

742
gorse-enterprisegorse-io0.4.23 of 5See more

gorse-enterprise gorse-io 0.4.2

3 of the 5 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
zhenghaoz/gorse-master:0.4.12033046b432ec
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.11.1
1.43.0
zhenghaoz/gorse-server:0.4.1239c565685b01
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.11.1
1.43.0
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.11.1
1.43.0

Open the chart page →

4,380
meta-monitoringgrafana1.3.01 of 2See more

meta-monitoring grafana 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
grafana/alloy:v1.4.306bdcbb51fc2
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.4.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.28.0
0.19.0
1.43.0
1.43.0

Open the chart page →

3,518
joylive-injectorjoyliveOfficialVerified publisher1.3.51 of 2See more

joylive-injector joylive 1.3.5

1 of the 2 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.100.09e36620d6c2c
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.26.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.26.0
1.43.0
1.43.0

Open the chart page →

1,273
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.327 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

7 of the 17 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.14.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.39.0
0.19.0
1.43.0
1.43.0
grafana/grafana:12.3.12175aaa91c96
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.12.2
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
0.19.0
1.43.0
1.43.0
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.12.2
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.36.0
0.19.0
1.43.0
1.43.0
grafana/loki-canary:3.6.70dac7d5cb383
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.12.2
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.36.0
0.19.0
1.43.0
1.43.0
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.13.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
0.19.0
1.43.0
1.43.0
quay.io/prometheus/alertmanager:v0.31.188b605de9aba
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.39.0
1.43.0
quay.io/prometheus/prometheus:v3.10.07571a304e67f
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.40.0
1.43.0

Open the chart page →

15,418
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.4.1
1.43.0

Open the chart page →

3,274
authz-pdplabs64io-helm-chartsVerified publisher0.6.01 of 1See more

authz-pdp labs64io-helm-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/cerbos/cerbos:0.51.08d35a64e4a99
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.39.0
1.43.0
1.43.0

Open the chart page →

800
lagoon-remotelagoon-chartsVerified publisher0.106.01 of 1See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.31.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.31.0
1.43.0
1.43.0

Open the chart page →

2,113
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge1 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

1 of the 4 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v0.39.0
1.43.0

Open the chart page →

4,389
log2rbac-operatorlog2rbac-operator0.0.51 of 1See more

log2rbac-operator log2rbac-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
jkremser/log2rbac:v0.0.5e35cf56ef183
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.6.3
1.43.0

Open the chart page →

1,938
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.7.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.32.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.31.0
0.19.0
1.43.0
1.43.0

Open the chart page →

4,137
opikopikOfficialVerified publisher2.2.591 of 13See more

opik opik 2.2.59

1 of the 13 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/comet-ml/opik/opik-python-backend:2.2.59269d0e55ea97
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.35.0
1.43.0
1.43.0

Open the chart page →

14,334
orbitalregorbitalregVerified publisher0.3.01 of 4See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
orbitalreg/orbitalreg-api:0.1.045f2620337af
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.5.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.29.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.29.0
0.19.0
1.43.0
1.43.0

Open the chart page →

2,278
prometheusromanow-helm-chartsVerified publisher1.7.21 of 1See more

prometheus romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.25.0
1.43.0

Open the chart page →

1,143
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
artifacthub/tracker:v1.19.06596c8c4d955
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.27.0
1.43.0

Open the chart page →

14,491
graph-nodestakewise3.1.01 of 3See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ipfs/kubo:v0.24.0e3de33bd746b
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.16.0
1.43.0

Open the chart page →

4,661
stornxstornxVerified publisher1.1.12 of 9See more

stornx stornx 1.1.1

2 of the 9 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
quay.io/kiali/kiali:v2.23.07652b1285f50
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0
1.43.0
quay.io/prometheus/prometheus:v3.10.07571a304e67f
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.40.0
1.43.0

Open the chart page →

11,574
supabasesupabse0.8.02 of 11See more

supabase supabse 0.8.0

2 of the 11 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.30.13b709e4a0e5e
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
1.43.0
1.43.0
supabase/gotrue:v2.189.0385184459f57
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.26.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.40.0
1.43.0
1.43.0

Open the chart page →

18,075
switchboardswitchboardVerified publisher0.7.41 of 1See more

switchboard switchboard 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/borchero/switchboard:0.7.454a193b757da
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.17.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.41.0
0.19.0
1.43.0

Open the chart page →

839
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v0.39.0
1.43.0

Open the chart page →

3,165
agentkube-operatoragentkube-operator0.3.01 of 1See more

agentkube-operator agentkube-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.14.0
1.43.0

Open the chart page →

1,716
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.4.1
1.43.0

Open the chart page →

4,547
ipalpineworks0.1.21 of 1See more

ip alpineworks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/ip:v1.0.04e0d4d51f0bc
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.34.0
1.43.0

Open the chart page →

534
versitygw-webhook-pulsar-proxyalpineworks0.1.11 of 1See more

versitygw-webhook-pulsar-proxy alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/versitygw-webhook-pulsar-proxy:v1.0.06e9ced773732
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.34.0
1.43.0

Open the chart page →

893
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
daprio/dashboard:0.14.07ba5d51e5b97
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.13.0
1.43.0

Open the chart page →

28,131
sliding-sync-proxyananace-chartsVerified publisher0.2.131 of 2See more

sliding-sync-proxy ananace-charts 0.2.13

1 of the 2 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/matrix-org/sliding-sync:v0.99.19b940cab56435
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.18.0
1.43.0

Open the chart page →

1,592
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
prom/prometheus:v2.37.98176adea328e
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.7.0
1.43.0

Open the chart page →

25,669
glauthanza-labsVerified publisher1.0.11 of 1See more

glauth anza-labs 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/glauth/glauth:v2.5.209c782ca5984
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.21.0
1.43.0

Open the chart page →

1,279
apipingapiping1.5.01 of 1See more

apiping apiping 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
udhos/apiping:1.5.041ab9bae6f3b
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
1.43.0

Open the chart page →

1,131
opentelemetry-kube-stackappscodeVerified publisher0.14.121 of 3See more

opentelemetry-kube-stack appscode 0.14.12

1 of the 3 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.15.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.39.0
0.19.0
1.43.0
1.43.0

Open the chart page →

1,872
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.35.0
1.43.0
1.43.0

Open the chart page →

9,847
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.19.0
1.43.0

Open the chart page →

4,923
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.11.2
1.43.0

Open the chart page →

23,353
performanceandusagediagnosisassist-iot-pud1.0.01 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.7.0
1.43.0

Open the chart page →

8,556
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.28.0
1.43.0
1.43.0

Open the chart page →

45,363
celestia-localastria9.0.01 of 2See more

celestia-local astria 9.0.0

1 of the 2 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.27.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0
1.43.0
1.43.0

Open the chart page →

3,281
celestia-nodeastria0.7.11 of 1See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.27.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0
1.43.0
1.43.0

Open the chart page →

1,502
graph-nodeastria0.2.21 of 3See more

graph-node astria 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ipfs/kubo:v0.17.0803fac58ba15
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.7.0
1.43.0

Open the chart page →

5,495
axonops-operatoraxonops-operator0.1.01 of 1See more

axonops-operator axonops-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
ghcr.io/axonops/axonops-operator:0.1.0e0cdb993f0b1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.42.0
1.43.0

Open the chart page →

296
krakendbaboulinet0.1.341 of 1See more

krakend baboulinet 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.7.09219cda867e2
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.24.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.24.0
1.43.0
1.43.0

Open the chart page →

1,191
prometheusbook-k8sinfra-v226.0.11 of 6See more

prometheus book-k8sinfra-v2 26.0.1

1 of the 6 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.30.0
1.43.0

Open the chart page →

5,304
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.25.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.25.0
1.43.0
1.43.0

Open the chart page →

3,244
tempobook-k8sinfra-v21.10.31 of 1See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.24.0
1.43.0
1.43.0

Open the chart page →

1,859
caddycaddyVerified publisher0.0.41 of 1See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
library/caddy:2.11.2-alpine834468128c76
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.16.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.40.0
0.19.0
1.43.0
1.43.0

Open the chart page →

1,677
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2026-39882.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.27.0
1.43.0

Open the chart page →

16,198

Container images carrying it

274 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
1.43.0
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.11.2
1.43.0
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0
1.43.0
1.43.0
1
ghcr.io/glassflow/glassflow-etl-be:v3.2.020f066d0f631
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.14.0
0.19.0
1
ghcr.io/glauth/glauth:v2.5.209c782ca5984
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.21.0
1.43.0
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
1.43.0
1.43.0
1
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.16.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.40.0
0.19.0
1.43.0
1.43.0
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
1.43.0
1
ghcr.io/kedacore/keda:2.16.002348a19aeae
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.31.0
1.43.0
1
ghcr.io/kedacore/keda:2.17.0112fc427d933
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.35.0
1.43.0
1
ghcr.io/kedacore/keda:2.17.272dc058e478d
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.35.0
1.43.0
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.35.0
1.43.0
1
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.31.0
1.43.0
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.35.0
1.43.0
1
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.12.2
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.32.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.33.0
0.19.0
1.43.0
1.43.0
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.4.1
1.43.0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.4.1
1.43.0
1
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.18.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.42.0
0.19.0
1.43.0
1.43.0
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v0.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.16.0
1.43.0
1.43.0
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.7.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.32.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.31.0
0.19.0
1.43.0
1.43.0
1
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0
1.43.0
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.14.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.39.0
0.19.0
1.43.0
1.43.0
1
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.7.0
0.19.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.18.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.42.0
0.19.0
1.43.0
1.43.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.13.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0
0.19.0
1.43.0
1.43.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.15.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.39.0
0.19.0
1.43.0
1.43.0
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0
1.43.0
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.21.0
1.43.0
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.35.0
1.43.0
1
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.35.0
1.43.0
1.43.0
1
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.42.0
1.43.0
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.18.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.19.0
0.19.0
1.43.0
1.43.0
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.39.0
1.43.0
1
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.28.0
1.43.0
1
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.16.0
1.43.0
1
ghcr.io/synapsecns/sanguine/screener-api:latestb3de2050460a
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.28.0
1.43.0
1
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.28.0
1.43.0
1
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.20.0
1.43.0
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v0.39.0
1.43.0
1
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.38.0
1.43.0
1
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.23.1
1.43.0
1
ghcr.io/wasilak/go-hello-world:1.8.366d353e7693f
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.14.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
0.19.0
1.43.0
1.43.0
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.27.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.27.0
1.43.0
1.43.0
1
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v0.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.23.1
1.43.0
1.43.0
1
public.ecr.aws/aws-containers/retail-store-sample-catalog:1.3.0b654b266fa32
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0
1.43.0
1
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.7.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.32.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.32.0
0.19.0
1.43.0
1.43.0
1
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
1.43.0
1.43.0
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.14.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
0.19.0
1.43.0
1.43.0
1
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0
1.43.0
1
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.36.0
1.43.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.