CVE-2026-81869
MediumAdvisory
Published 29 Sept 2026In the index since 30 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.1
- base score, highest
- EPSS
- 0.002
- 7th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 399
- of 17,957 indexed, latest versions
- Container images
- 412
- deployed by those charts
- Fix available
- 1 of 1
- affected package
OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation
Carried by container images the latest versions of 399 of 17,957 indexed charts deploy, on 412 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v1.10.0, v1.11.1, v1.11.2, v1.12.0+22 more | 1.33.0 | 412 |
- OSV records
- GHSA-p9f8-wvj8-2fg8
- Trending
- Rank 34 in indexed charts, since 30 Sept 2026. See the ranking →
Charts affected
399 by stars
Container images carrying it
412 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 5e0a3dfa9f96 | go.opentelemetry.io/ | 1.33.0 | 1 |
| ghcr.io/ | 81edba952403 | go.opentelemetry.io/ | 1.33.0 | 1 |
| ghcr.io/ | 3e98a98f6074 | go.opentelemetry.io/ | 1.33.0 | 1 |
| ghcr.io/ | 5d7506dce446 | go.opentelemetry.io/ | 1.33.0 | 1 |
| ghcr.io/ | b354978c440d | go.opentelemetry.io/ | 1.33.0 | 1 |
| ghcr.io/ | 322f5f8cc105 | go.opentelemetry.io/ | 1.33.0 | 1 |
| ghcr.io/ | 9d01bf9c9224 | go.opentelemetry.io/ | 1.33.0 | 1 |
| ghcr.io/ | b92123805584 | go.opentelemetry.io/ | 1.33.0 | 1 |
| ghcr.io/ | 21715979aefa | go.opentelemetry.io/ | 1.33.0 | 1 |
| ghcr.io/ | 49800ff775f3 | go.opentelemetry.io/ | 1.33.0 | 1 |
| ghcr.io/ | efb69ec3330c | go.opentelemetry.io/ | 1.33.0 | 1 |
| ghcr.io/ | 5a6fe78d4d15 | go.opentelemetry.io/ | 1.33.0 | 1 |
| ghcr.io/ | 5afcab98d9d7 | go.opentelemetry.io/ | 1.33.0 | 1 |
| ghcr.io/ | cd25ee354df2 | go.opentelemetry.io/ | 1.33.0 | 1 |
| mcr.microsoft.com/ | 5f91243cfd60 | go.opentelemetry.io/ | 1.33.0 | 1 |
| public.ecr.aws/ | 1eb61443d68e | go.opentelemetry.io/ | 1.33.0 | 1 |
| public.ecr.aws/ | 8aa9ea5f67b8 | go.opentelemetry.io/ | 1.33.0 | 1 |
| public.ecr.aws/ | 87cbd356af2e | go.opentelemetry.io/ | 1.33.0 | 1 |
| public.ecr.aws/ | e7e1db003e6a | go.opentelemetry.io/ | 1.33.0 | 1 |
| public.ecr.aws/ | af8cea3b8538 | go.opentelemetry.io/ | 1.33.0 | 1 |
| public.ecr.aws/ | 70f191d0a80e | go.opentelemetry.io/ | 1.33.0 | 1 |
| public.ecr.aws/ | a94d2d4aae85 | go.opentelemetry.io/ | 1.33.0 | 1 |
| public.ecr.aws/ | 651739583336 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 83c86003b781 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | acaf37352569 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 2c8f8c357ff8 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 754ab2a723c8 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 13aaae779248 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 842975891182 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | d967d98a12dc | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 93889c3d8a34 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 63baf86a49ac | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 4de059bb32ac | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 4a9d0264055b | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 9c0527cab629 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | ae5e14401cde | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 6edf44244b2a | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | ec4306b243d9 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | ef419261a209 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 0dcdb1c1e747 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 96c5264d54ab | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 1b6002156f56 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 40d0363f4aa6 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | f9ea8cef95ac | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 8d38ffa8fad7 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 3b9b2a15d376 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 4748e26f9369 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | f20d3127bf28 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | 7b4202c25b67 | go.opentelemetry.io/ | 1.33.0 | 1 |
| quay.io/ | e542959e1b36 | go.opentelemetry.io/ | 1.33.0 | 1 |