CVE-2026-41178
UnscoredAdvisory
Published 24 Jul 2026In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.003
- 27th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 475
- of 17,787 indexed, latest versions
- Container images
- 438
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Opentelemetry-go's baggage parsing no longer caps raw header length in go.opentelemetry.io/otel
Carried by container images the latest versions of 475 of 17,787 indexed charts deploy, on 438 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v1.41.0, v1.43.0 | 1.42.0 | 438 |
- OSV records
- GO-2026-5158
- Also known as
- GHSA-5wrp-cwcj-q835
Charts affected
475 by stars
Container images carrying it
438 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| volcanosh/ | afab36286a17 | go.opentelemetry.io/ | 1.42.0 | 1 |
| volcanosh/ | 2fff65aad011 | go.opentelemetry.io/ | 1.42.0 | 1 |
| xosphere/ | 1458097b6f85 | go.opentelemetry.io/ | 1.42.0 | 1 |
| zooproject/ | 9a507cb7e2dd | go.opentelemetry.io/ | 1.42.0 | 1 |
| gcr.io/ | a9983dd6d928 | go.opentelemetry.io/ | 1.42.0 | 1 |
| gcr.io/ | ec6f9ea5757b | go.opentelemetry.io/ | 1.42.0 | 1 |
| gcr.io/ | ea30f1ce8dc4 | go.opentelemetry.io/ | 1.42.0 | 1 |
| gcr.io/ | 95d1a4fc8cd0 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | ca0662bc92a4 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 459010a02aff | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 4351831f757f | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 0511bbe501c3 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 8fbdd2479645 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 5605f97e636d | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 79e67164b4f0 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 4a16c6ccecb8 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 150baab6115d | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | a645b40d2d3b | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | d8d2a3c22ee7 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 9cb4acb742a9 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | efa03f4c9551 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 47b4a0e091f0 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 98b6ea2ed319 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 98baf045a1c9 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 167a51113d90 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 13290b9a64af | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 16759fa523f8 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 846624161f32 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 54a193b757da | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | f627ab242890 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 32ebc54b769b | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | cea3dd2f1312 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 896e4926e0d7 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 951d71162065 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 7008df32715c | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | a13a11fe9558 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 40c6d960ae4f | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 3f45bf0a1bc0 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 25b801d8d1f7 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | b238f3c58d83 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 1c4e803d7169 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 7877e91ed723 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 8d7ec69a193c | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | eb40174cd20d | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | cda6025d1152 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 233aa9808fc7 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 3108194a4ecc | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 6a8546993cb5 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 6b0b16ab2115 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 27e6bad1dac5 | go.opentelemetry.io/ | 1.42.0 | 1 |