CVE-2026-81870
LowAdvisory
Published 17 Sept 2026In the index since 18 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 2.0
- base score, highest
- EPSS
- 0.002
- 9th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,386
- of 17,805 indexed, latest versions
- Container images
- 1,415
- deployed by those charts
- Fix available
- 6 of 6
- affected packages
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
Carried by container images the latest versions of 1,386 of 17,805 indexed charts deploy, on 1,415 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.8.0, v1.9.0+40 more | 1.45.0 | 1,390 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more | 1.45.0 | 1,113 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more | 1.45.0 | 1,026 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more | 1.45.0 | 437 |
| go.opentelemetry.io/ | v1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more | 1.45.0 | 39 |
| kubernetes-1.36apk | 1.36.4-r8 | 1.36.4-r10 | 1 |
- OSV records
- CGA-2c9g-p4w2-5539GHSA-8wmf-6v46-5gfg
- Also known as
- CGA-3wf9-xxx4-3cwx, CGA-6492-hrx3-qqwg, CGA-7fm4-77h5-5xv5, CGA-7r7f-p2pr-7w6x, CGA-94hm-pgxc-g949, CGA-95h5-9cf3-7w6f, CGA-9v46-576g-p8q6, CGA-9w5x-grm4-mwqw, CGA-cmx9-cm4w-g6rc, CGA-cph3-6489-7mr5, CGA-f878-h3vr-ph69, CGA-f9g5-hvh2-cxwg, CGA-fgxv-46pw-wrrg, CGA-fjx9-g624-j5w2, CGA-g9fj-pqfm-pxhj, CGA-gvrh-v65x-4f64, CGA-hvph-q6vw-mp7h, CGA-jvxq-8v73-23wj, CGA-mf36-f5m8-jp98, CGA-mh5g-xj8h-63rj, CGA-p25p-9grf-8c4r, CGA-pgh3-5vjx-6h78, CGA-r2cr-m4m5-296p, CGA-rc9c-wr95-6pw5, CGA-wmp5-5fch-33v9, CGA-wwqw-q86j-r6j6, CGA-xgxm-29f7-q4c3, CGA-xv44-f9jp-whfv, CGA-xxjh-jh7q-vwjq
- Trending
- Rank 2 in indexed charts, since 18 Sept 2026. See the ranking →
Charts affected
1,386 by stars
Container images carrying it
1,415 by charts deploying them
A fixed version is listed for 6 of the 6 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | ab2e1fa19dd4 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| ghcr.io/ | 5217e3d1fc70 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 4 |
| quay.io/ | dd3f47d5a5e4 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| quay.io/ | 6b83f55bd99e | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| quay.io/ | 48ea4a77dfa7 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| quay.io/ | 690c7b525f43 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 4 |
| quay.io/ | b567818fe608 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 4 |
| registry.k8s.io/ | e750cd4b43f7 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| registry.k8s.io/ | d9862115e7c7 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| registry.k8s.io/ | 932eae60e2bc | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| registry.k8s.io/ | 81e79f205083 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| apache/ | 5c5efa4c7f2a | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| bitnamilegacy/ | 99b408c15272 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| cloudflare/ | 51c9cefcb456 | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 3 |
| cloudpirates/ | 8dc02a7e5093 | go.opentelemetry.io/ | 1.45.0 | 3 |
| envoyproxy/ | 156b7d32c73b | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 0dc5a246ab16 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 121a7a9ece6d | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 3600073f45a9 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | a0f881232a6f | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 58a6c186ce78 | go.opentelemetry.io/ | 1.45.0 | 3 |
| grafana/ | d70e4659623f | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 0dac7d5cb383 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| hashicorp/ | 5be49781ecf7 | go.opentelemetry.io/ | 1.45.0 | 3 |
| kubegems/ | a730bcf9322a | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| louislam/ | 917318f9d7be | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 3 |
| mcp/ | 9362bcf6aa0e | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| meshery/ | 44b64ee128fb | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| migrate/ | cc4ad8e19d66 | go.opentelemetry.io/ | 1.45.0 | 3 |
| oryd/ | 2c93beb5e5f2 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| prom/ | 565ee8650122 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| tykio/ | 0e03b94c153d | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| tykio/ | 3e907e675bf9 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| velero/ | 37396519f399 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | 93fa0daf603c | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | d1036b07e348 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | 6ea19b670111 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | 5ac0db7ca106 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | af58fae3e7c9 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | 90d2293f42a3 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | 239eac864320 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | 05286fc952e7 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | c8e042b5cee8 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | 5a878e4e4f03 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | 28c5ff40963f | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | a89736c586ba | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | e67f14e5c853 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| quay.io/ | fa07b2c9ece6 | go.opentelemetry.io/ | 1.45.0 | 3 |
| quay.io/ | cb009167015c | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| quay.io/ | 9795f3f9f031 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |