CVE-2026-41178
UnscoredAdvisory
Published 24 Jul 2026In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.003
- 27th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 475
- of 17,787 indexed, latest versions
- Container images
- 438
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Opentelemetry-go's baggage parsing no longer caps raw header length in go.opentelemetry.io/otel
Carried by container images the latest versions of 475 of 17,787 indexed charts deploy, on 438 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v1.41.0, v1.43.0 | 1.42.0 | 438 |
- OSV records
- GO-2026-5158
- Also known as
- GHSA-5wrp-cwcj-q835
Charts affected
475 by stars
Container images carrying it
438 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 20f066d0f631 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | ed120caf710c | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 05e86c39c535 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 4ee4b71cf16a | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | d45fc24e8f43 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 0c4b6132b0ad | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 9e24d8a6a3b2 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 08265c006973 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 29458113b8b6 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | cd8bf46d98e0 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | fe74c7b88495 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 41f74102aba7 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 27286536a8a7 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 7390a215d63c | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 8d5d41ab22aa | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 2f88856584a8 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | c743f8d7a199 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 735dd5d2709d | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 4e2a3cce7ce8 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | e93dfe7454d4 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 98ffb48f5b60 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 8ab954711fb9 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 7280594a2f18 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | df10e783095e | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | cce8ff866f60 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 2a19792ad2ec | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 8617f0a7f703 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | fb3b88633381 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | ef92da4621e6 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 990dbf506d41 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | caeb2652ce5e | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | ff23f452813a | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | ebbd44abae6c | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | f19a306ce759 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | a16ab5ca10a7 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | c0c8d53df9f3 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 6c17297f9098 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 32234e63c1d0 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | b37a442c0497 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 2434560e8f0e | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 26f82b148dfe | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 89490ef63b72 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 787f6de2b620 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 38c388cfc8d1 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | bcb7f0f733f5 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 7b05d3bbfbfa | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 45bdeaf3fcd6 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | d06374430a17 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 17666811f6a7 | go.opentelemetry.io/ | 1.42.0 | 1 |
| ghcr.io/ | 97d2d9ccd7a5 | go.opentelemetry.io/ | 1.42.0 | 1 |