StackRadar

CVE-2026-81870

Low

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,343
of 17,821 indexed, latest versions
Container images
1,376
deployed by those charts
Fix available
5 of 5
affected packages

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Carried by container images the latest versions of 1,343 of 17,821 indexed charts deploy, on 1,376 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.6.3, v1.7.0, v1.8.0, v1.9.0+40 more1.45.01,354
go.opentelemetry.io/otel/exporters/otlp/otlptracegolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more1.45.01,077
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcgolangv1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more1.45.0996
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpgolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more1.45.0420
go.opentelemetry.io/otel/exporters/zipkingolangv1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more1.45.037
OSV records
GHSA-8wmf-6v46-5gfg
Trending
Rank 3 in indexed charts, since 18 Sept 2026. See the ranking →

Charts affected

1,343 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

1,376 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/kylan11/understudy:0.4.24454589d3884
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/kymaroshq/kymaros:0.6.9fb3b88633381
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.23.1
go.opentelemetry.io/otel/sdk@v1.24.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.23.1
go.opentelemetry.io/otel/sdk@v1.24.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.23.1
go.opentelemetry.io/otel/sdk@v1.24.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.23.1
go.opentelemetry.io/otel/sdk@v1.24.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.23.1
go.opentelemetry.io/otel/sdk@v1.24.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.23.1
go.opentelemetry.io/otel/sdk@v1.24.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0
go.opentelemetry.io/otel/sdk@v1.21.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/loafoe/go-hello-world:v2.13.0d3fb171f20e1
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/loafoe/mt-mcp-grafana:v0.1.12332d9b47475
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/loafoe/mt-mcp-proxy:v0.1.0221835f9340f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.16.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.16.0
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/lockdep/stackradar-scanner:0.4.073cbeb990cf4
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.12.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.12.0
go.opentelemetry.io/otel/sdk@v1.12.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/loft-sh/central-hostpath-mapper:0.2.9fa6dba122171
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.22.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.22.0
go.opentelemetry.io/otel/sdk@v1.27.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.22.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.22.0
go.opentelemetry.io/otel/sdk@v1.22.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.36.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.16.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.16.0
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.16.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.16.0
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.22.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.22.0
go.opentelemetry.io/otel/sdk@v1.22.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/loft-sh/vcluster-hpm:0.2.7f65f6810ea23
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/loft-sh/vcluster-platform:4.12.19bc88940affc
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.42.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.30.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.30.0
go.opentelemetry.io/otel/sdk@v1.31.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/lukaszraczylo/jobs-manager-operator:0.1.15e6239e2838d7
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.39.0
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/lukaszraczylo/kubernetes-images-sync-operator:0.5.57a424948c8143
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.39.0
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.26.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.26.0
go.opentelemetry.io/otel/sdk@v1.26.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/m0nsterrr/cert-manager-webhook-infomaniak:v0.1.5990dbf506d41
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.37.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
go.opentelemetry.io/otel/sdk@v1.19.0
1.45.0
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1
ghcr.io/marmotdata/marmot:0.10.0bd2a49f86486
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/exporters/zipkin@v1.21.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/melancholictheory/wellcake:0.8.12fd2678f07ef
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.36.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/metio/jaas:2026.6.15e28772028e56
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
go.opentelemetry.io/otel/sdk@v1.11.2
1.45.0
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.16.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.16.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.16.0
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.31.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.31.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.31.0
go.opentelemetry.io/otel/sdk@v1.32.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/middleware-labs/mw-kube-agent:1.21.0ff23f452813a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/mindburn-labs/helm-ai-kernel:v0.8.51de558875379
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/misiektoja/cmp-issuer:v0.2.11726b2680a19
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.15.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.15.0
go.opentelemetry.io/otel/sdk@v1.15.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
go.opentelemetry.io/otel/sdk@v1.21.0
1.45.0
1
ghcr.io/movetokube/postgres-operator:2.4.0def57d85a2da
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/nginx/nginx-gateway-fabric:2.4.180f3a0a51af5
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.39.0
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/nginx/nginx-gateway-fabric:2.6.6c10f734589e9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/niklas-letz/cert-manager-webhook-solidserver:1.0.2f19a306ce759
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/nutanix-cloud-native/ndb-operator/controller:v0.5.8b3927d7b72b9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.