CVE-2026-81870
LowAdvisory
Published 17 Sept 2026In the index since 18 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 2.0
- base score, highest
- EPSS
- 0.002
- 9th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,365
- of 17,803 indexed, latest versions
- Container images
- 1,418
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
Carried by container images the latest versions of 1,365 of 17,803 indexed charts deploy, on 1,418 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.8.0, v1.9.0+39 more | 1.45.0 | 1,394 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more | 1.45.0 | 1,117 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more | 1.45.0 | 1,029 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more | 1.45.0 | 444 |
| go.opentelemetry.io/ | v1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more | 1.45.0 | 39 |
- OSV records
- GHSA-8wmf-6v46-5gfg
- Trending
- Rank 2 in indexed charts, since 18 Sept 2026. See the ranking →
Charts affected
1,365 by stars
Container images carrying it
1,418 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| registry.k8s.io/ | 932eae60e2bc | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| registry.k8s.io/ | 81e79f205083 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 4 |
| cloudflare/ | 51c9cefcb456 | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 3 |
| cloudflare/ | b269e8abd07a | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 3 |
| cloudpirates/ | 8dc02a7e5093 | go.opentelemetry.io/ | 1.45.0 | 3 |
| envoyproxy/ | 156b7d32c73b | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| goharbor/ | d7b780d23721 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| goharbor/ | f71a4452a095 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| goharbor/ | 223d5cb49d5d | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| goharbor/ | 215c07b71c37 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 0dc5a246ab16 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 3600073f45a9 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 7cb8c64c4d57 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | a0f881232a6f | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 58a6c186ce78 | go.opentelemetry.io/ | 1.45.0 | 3 |
| grafana/ | d70e4659623f | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| grafana/ | 0dac7d5cb383 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| jaegertracing/ | ab6f1a1f0fb4 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| kubegems/ | a730bcf9322a | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| louislam/ | 917318f9d7be | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 3 |
| mcp/ | 9362bcf6aa0e | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| migrate/ | cc4ad8e19d66 | go.opentelemetry.io/ | 1.45.0 | 3 |
| oryd/ | 2c93beb5e5f2 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| prom/ | 565ee8650122 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| tykio/ | 0e03b94c153d | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| tykio/ | 3e907e675bf9 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| velero/ | 37396519f399 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | 93fa0daf603c | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | d1036b07e348 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | 0c6994bb4c5a | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | 8499afd690c4 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | 814117b0fd6d | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 3 |
| ghcr.io/ | c8e042b5cee8 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | 5a878e4e4f03 | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | 28c5ff40963f | go.opentelemetry.io/ | 1.45.0 | 3 |
| ghcr.io/ | a89736c586ba | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| ghcr.io/ | e67f14e5c853 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| mcr.microsoft.com/ | 9915a2058ad6 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| mcr.microsoft.com/ | 4bfe19fe8919 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| quay.io/ | dd3f47d5a5e4 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| quay.io/ | 9795f3f9f031 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| quay.io/ | 01d5d8c4cecb | go.opentelemetry.io/ | 1.45.0 | 3 |
| quay.io/ | d30a7c640c63 | go.opentelemetry.io/ | 1.45.0 | 3 |
| quay.io/ | a7dff785d821 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |
| quay.io/ | 7d9247d23514 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| quay.io/ | 1a3e9a878e50 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| quay.io/ | 378f4e037035 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| quay.io/ | 7571a304e67f | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| quay.io/ | f5c29683a301 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 3 |
| registry.k8s.io/ | 2bbc91556733 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 3 |