CVE-2026-81869
MediumAdvisory
Published 29 Sept 2026In the index since 30 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.1
- base score, highest
- EPSS
- 0.002
- 7th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 399
- of 17,957 indexed, latest versions
- Container images
- 412
- deployed by those charts
- Fix available
- 1 of 1
- affected package
OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation
Carried by container images the latest versions of 399 of 17,957 indexed charts deploy, on 412 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v1.10.0, v1.11.1, v1.11.2, v1.12.0+22 more | 1.33.0 | 412 |
- OSV records
- GHSA-p9f8-wvj8-2fg8
- Trending
- Rank 34 in indexed charts, since 30 Sept 2026. See the ranking →
Charts affected
399 by stars
Container images carrying it
412 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| zhenghaoz/ | f7739f64c9b0 | go.opentelemetry.io/ | 1.33.0 | 2 |
| ghcr.io/ | 2659f4c2ebb7 | go.opentelemetry.io/ | 1.33.0 | 2 |
| ghcr.io/ | 866ced256a8c | go.opentelemetry.io/ | 1.33.0 | 2 |
| ghcr.io/ | dc48471c7cf8 | go.opentelemetry.io/ | 1.33.0 | 2 |
| ghcr.io/ | 6bb00c592a82 | go.opentelemetry.io/ | 1.33.0 | 2 |
| ghcr.io/ | b940cab56435 | go.opentelemetry.io/ | 1.33.0 | 2 |
| ghcr.io/ | 0d1df8f436f7 | go.opentelemetry.io/ | 1.33.0 | 2 |
| ghcr.io/ | 47cffbc65700 | go.opentelemetry.io/ | 1.33.0 | 2 |
| quay.io/ | e6a323504999 | go.opentelemetry.io/ | 1.33.0 | 2 |
| quay.io/ | 64adcb95ce09 | go.opentelemetry.io/ | 1.33.0 | 2 |
| quay.io/ | 9c67cf8c92d8 | go.opentelemetry.io/ | 1.33.0 | 2 |
| quay.io/ | d429b6d696e0 | go.opentelemetry.io/ | 1.33.0 | 2 |
| quay.io/ | eee34b3de2dd | go.opentelemetry.io/ | 1.33.0 | 2 |
| quay.io/ | 0a9470447ebf | go.opentelemetry.io/ | 1.33.0 | 2 |
| quay.io/ | 6730d96fc382 | go.opentelemetry.io/ | 1.33.0 | 2 |
| quay.io/ | d8ad5515f44f | go.opentelemetry.io/ | 1.33.0 | 2 |
| quay.io/ | fdcb9ac4963f | go.opentelemetry.io/ | 1.33.0 | 2 |
| quay.io/ | 075b1ba2c4eb | go.opentelemetry.io/ | 1.33.0 | 2 |
| quay.io/ | c5dd35038287 | go.opentelemetry.io/ | 1.33.0 | 2 |
| registry.k8s.io/ | 99e1ed9fbc8a | go.opentelemetry.io/ | 1.33.0 | 2 |
| registry.k8s.io/ | 40adecbe3a40 | go.opentelemetry.io/ | 1.33.0 | 2 |
| registry.k8s.io/ | 74a5cf9cfa9f | go.opentelemetry.io/ | 1.33.0 | 2 |
| 0xpolygon/ | 396d3de26d8b | go.opentelemetry.io/ | 1.33.0 | 1 |
| 1dev/ | cd5b12fe5471 | go.opentelemetry.io/ | 1.33.0 | 1 |
| aibrix/ | 76aabbbfda79 | go.opentelemetry.io/ | 1.33.0 | 1 |
| aibrix/ | 5b93ea4c753a | go.opentelemetry.io/ | 1.33.0 | 1 |
| alpine/ | 6dbe6f391eda | go.opentelemetry.io/ | 1.33.0 | 1 |
| alpine/ | 7e1e7d5b7a96 | go.opentelemetry.io/ | 1.33.0 | 1 |
| alpine/ | 9c4976d47656 | go.opentelemetry.io/ | 1.33.0 | 1 |
| alpine/ | eec354133193 | go.opentelemetry.io/ | 1.33.0 | 1 |
| altinity/ | 1d6f18dbd599 | go.opentelemetry.io/ | 1.33.0 | 1 |
| altinity/ | 4baec90b20cd | go.opentelemetry.io/ | 1.33.0 | 1 |
| altinity/ | 74315beb57db | go.opentelemetry.io/ | 1.33.0 | 1 |
| altinity/ | 6ecf67edfb71 | go.opentelemetry.io/ | 1.33.0 | 1 |
| altinity/ | a4d7ff0c727e | go.opentelemetry.io/ | 1.33.0 | 1 |
| amazon/ | d8ab0eef5074 | go.opentelemetry.io/ | 1.33.0 | 1 |
| amazon/ | 73b79b02f03a | go.opentelemetry.io/ | 1.33.0 | 1 |
| ambassador/ | 2a4598b03a6a | go.opentelemetry.io/ | 1.33.0 | 1 |
| ambassador/ | 5fc571509b8c | go.opentelemetry.io/ | 1.33.0 | 1 |
| apecloud/ | 5832d1a9097a | go.opentelemetry.io/ | 1.33.0 | 1 |
| aquasec/ | 6e790e233872 | go.opentelemetry.io/ | 1.33.0 | 1 |
| artifacthub/ | 111918d8c399 | go.opentelemetry.io/ | 1.33.0 | 1 |
| artifacthub/ | 323d026e78c3 | go.opentelemetry.io/ | 1.33.0 | 1 |
| artifacthub/ | 6596c8c4d955 | go.opentelemetry.io/ | 1.33.0 | 1 |
| astarte/ | e3ff1b3c0c98 | go.opentelemetry.io/ | 1.33.0 | 1 |
| baserow/ | df0c42eb67e8 | go.opentelemetry.io/ | 1.33.0 | 1 |
| bitnamilegacy/ | 33ae872fc99d | go.opentelemetry.io/ | 1.33.0 | 1 |
| bitnamilegacy/ | cb8ab5515676 | go.opentelemetry.io/ | 1.33.0 | 1 |
| bitnamilegacy/ | c0ede65eb88e | go.opentelemetry.io/ | 1.33.0 | 1 |
| bitnamilegacy/ | cce234b4381a | go.opentelemetry.io/ | 1.33.0 | 1 |