CVE-2026-81869
MediumAdvisory
Published 29 Sept 2026In the index since 30 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.1
- base score, highest
- EPSS
- 0.002
- 7th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 399
- of 17,957 indexed, latest versions
- Container images
- 412
- deployed by those charts
- Fix available
- 1 of 1
- affected package
OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation
Carried by container images the latest versions of 399 of 17,957 indexed charts deploy, on 412 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v1.10.0, v1.11.1, v1.11.2, v1.12.0+22 more | 1.33.0 | 412 |
- OSV records
- GHSA-p9f8-wvj8-2fg8
- Trending
- Rank 34 in indexed charts, since 30 Sept 2026. See the ranking →
Charts affected
399 by stars
Container images carrying it
412 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | 6b5b37eb35bb | go.opentelemetry.io/ | 1.33.0 | 1 |
| grafana/ | 76dcf36e7d2a | go.opentelemetry.io/ | 1.33.0 | 1 |
| grafana/ | 8640e5038e83 | go.opentelemetry.io/ | 1.33.0 | 1 |
| grafana/ | b23b588cf7cb | go.opentelemetry.io/ | 1.33.0 | 1 |
| grafana/ | f9811e4e687f | go.opentelemetry.io/ | 1.33.0 | 1 |
| grafana/ | fa801ab6e1ae | go.opentelemetry.io/ | 1.33.0 | 1 |
| grafana/ | 882e30c20683 | go.opentelemetry.io/ | 1.33.0 | 1 |
| grafana/ | 8af2de1abbdd | go.opentelemetry.io/ | 1.33.0 | 1 |
| grafana/ | f55a8a1937ff | go.opentelemetry.io/ | 1.33.0 | 1 |
| hashicorp/ | 712fe02d2f84 | go.opentelemetry.io/ | 1.33.0 | 1 |
| hashicorp/ | ddff34041c5c | go.opentelemetry.io/ | 1.33.0 | 1 |
| hashicorp/ | b77efab1a448 | go.opentelemetry.io/ | 1.33.0 | 1 |
| hashicorp/ | 0b01ed3924e6 | go.opentelemetry.io/ | 1.33.0 | 1 |
| hashicorp/ | 750bb37c1638 | go.opentelemetry.io/ | 1.33.0 | 1 |
| hashicorp/ | b2177a8bfe85 | go.opentelemetry.io/ | 1.33.0 | 1 |
| hetznercloud/ | 8c07e6d7a76c | go.opentelemetry.io/ | 1.33.0 | 1 |
| hfoxy4/ | 0bfb65aaad93 | go.opentelemetry.io/ | 1.33.0 | 1 |
| holoinsight/ | 42ba8dc3113c | go.opentelemetry.io/ | 1.33.0 | 1 |
| hoppscotch/ | 538fe6ded4b6 | go.opentelemetry.io/ | 1.33.0 | 1 |
| huacnlee/ | 560be93229a5 | go.opentelemetry.io/ | 1.33.0 | 1 |
| huacnlee/ | d9c693e99576 | go.opentelemetry.io/ | 1.33.0 | 1 |
| huangchengwu6904/ | 1b932f8221a9 | go.opentelemetry.io/ | 1.33.0 | 1 |
| ipfs/ | bfce363b878b | go.opentelemetry.io/ | 1.33.0 | 1 |
| ipfs/ | e3de33bd746b | go.opentelemetry.io/ | 1.33.0 | 1 |
| istio/ | ab34c4740f44 | go.opentelemetry.io/ | 1.33.0 | 1 |
| istio/ | 9c3d6a218181 | go.opentelemetry.io/ | 1.33.0 | 1 |
| jaegertracing/ | 60e65bfffe1f | go.opentelemetry.io/ | 1.33.0 | 1 |
| jaegertracing/ | f6b5d09073f1 | go.opentelemetry.io/ | 1.33.0 | 1 |
| jaegertracing/ | 3f036ec60e61 | go.opentelemetry.io/ | 1.33.0 | 1 |
| jamesorlakin/ | 3894dc11b236 | go.opentelemetry.io/ | 1.33.0 | 1 |
| jkaninda/ | 8cfda26ecb7d | go.opentelemetry.io/ | 1.33.0 | 1 |
| kfirfer/ | c257c1e0e8b9 | go.opentelemetry.io/ | 1.33.0 | 1 |
| kubebuilder/ | 3c4f708c6204 | go.opentelemetry.io/ | 1.33.0 | 1 |
| kubeshop/ | 73d7e3a2db43 | go.opentelemetry.io/ | 1.33.0 | 1 |
| kubevip/ | f8f4e3401f76 | go.opentelemetry.io/ | 1.33.0 | 1 |
| kusionstack/ | b707d3bf0abd | go.opentelemetry.io/ | 1.33.0 | 1 |
| library/ | 60fb54d36b4b | go.opentelemetry.io/ | 1.33.0 | 1 |
| library/ | b4e3952384eb | go.opentelemetry.io/ | 1.33.0 | 1 |
| library/ | 1d148deae16a | go.opentelemetry.io/ | 1.33.0 | 1 |
| library/ | 2416984b43dd | go.opentelemetry.io/ | 1.33.0 | 1 |
| library/ | 851f91d24121 | go.opentelemetry.io/ | 1.33.0 | 1 |
| library/ | aa3df78ecf32 | go.opentelemetry.io/ | 1.33.0 | 1 |
| library/ | afa5d5134900 | go.opentelemetry.io/ | 1.33.0 | 1 |
| library/ | dd43b430341a | go.opentelemetry.io/ | 1.33.0 | 1 |
| library/ | 104204dadedf | go.opentelemetry.io/ | 1.33.0 | 1 |
| library/ | f98ac9dd97b0 | go.opentelemetry.io/ | 1.33.0 | 1 |
| lightstep/ | c800e05e1eff | go.opentelemetry.io/ | 1.33.0 | 1 |
| logiqai/ | 65b996bc7bdc | go.opentelemetry.io/ | 1.33.0 | 1 |
| louislam/ | bc6f244ecf27 | go.opentelemetry.io/ | 1.33.0 | 1 |
| netbirdio/ | 0c9994b393ea | go.opentelemetry.io/ | 1.33.0 | 1 |