CVE-2026-81870
LowAdvisory
Published 17 Sept 2026In the index since 18 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 2.0
- base score, highest
- EPSS
- 0.002
- 9th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,370
- of 17,805 indexed, latest versions
- Container images
- 1,395
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
Carried by container images the latest versions of 1,370 of 17,805 indexed charts deploy, on 1,395 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.8.0, v1.9.0+39 more | 1.45.0 | 1,372 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more | 1.45.0 | 1,099 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more | 1.45.0 | 1,012 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more | 1.45.0 | 432 |
| go.opentelemetry.io/ | v1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more | 1.45.0 | 38 |
- OSV records
- GHSA-8wmf-6v46-5gfg
- Trending
- Rank 2 in indexed charts, since 18 Sept 2026. See the ranking →
Charts affected
1,370 by stars
Container images carrying it
1,395 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | ab2e1fa19dd4 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| ghcr.io/ | 5217e3d1fc70 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 4 |
| quay.io/ | dd3f47d5a5e4 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| quay.io/ | 6b83f55bd99e | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| quay.io/ | 48ea4a77dfa7 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| quay.io/ | 690c7b525f43 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 4 |
| quay.io/ | b567818fe608 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 4 |
| registry.k8s.io/ | e750cd4b43f7 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| registry.k8s.io/ | d9862115e7c7 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| registry.k8s.io/ | 932eae60e2bc | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| registry.k8s.io/ | 81e79f205083 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| apache/ | 5c5efa4c7f2a | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| bitnamilegacy/ | 99b408c15272 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| cloudflare/ | 51c9cefcb456 | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 3 |
| cloudpirates/ | 8dc02a7e5093 | go.opentelemetry.io/ | 1.45.0 | 3 |
| envoyproxy/ | 156b7d32c73b | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 0dc5a246ab16 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 121a7a9ece6d | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 3600073f45a9 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | a0f881232a6f | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 58a6c186ce78 | go.opentelemetry.io/ | 1.45.0 | 3 |
| grafana/ | d70e4659623f | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 0dac7d5cb383 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| hashicorp/ | 5be49781ecf7 | go.opentelemetry.io/ | 1.45.0 | 3 |
| kubegems/ | a730bcf9322a | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| louislam/ | 917318f9d7be | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 3 |
| mcp/ | 9362bcf6aa0e | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| meshery/ | 44b64ee128fb | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| migrate/ | cc4ad8e19d66 | go.opentelemetry.io/ | 1.45.0 | 3 |
| oryd/ | 2c93beb5e5f2 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| prom/ | 565ee8650122 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| tykio/ | 0e03b94c153d | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| tykio/ | 3e907e675bf9 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| velero/ | 37396519f399 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | 93fa0daf603c | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | d1036b07e348 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | 5ac0db7ca106 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | af58fae3e7c9 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | 90d2293f42a3 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | 239eac864320 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | 05286fc952e7 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | c8e042b5cee8 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | 5a878e4e4f03 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | 28c5ff40963f | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | a89736c586ba | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | e67f14e5c853 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| quay.io/ | fa07b2c9ece6 | go.opentelemetry.io/ | 1.45.0 | 3 |
| quay.io/ | cb009167015c | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| quay.io/ | 9795f3f9f031 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| quay.io/ | 01d5d8c4cecb | go.opentelemetry.io/ | 1.45.0 | 3 |