StackRadar

CVE-2026-81870

Low

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,355
of 17,821 indexed, latest versions
Container images
1,401
deployed by those charts
Fix available
5 of 5
affected packages

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Carried by container images the latest versions of 1,355 of 17,821 indexed charts deploy, on 1,401 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.6.3, v1.7.0, v1.8.0, v1.9.0+40 more1.45.01,379
go.opentelemetry.io/otel/exporters/otlp/otlptracegolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more1.45.01,096
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcgolangv1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more1.45.01,011
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpgolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more1.45.0426
go.opentelemetry.io/otel/exporters/zipkingolangv1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more1.45.037
OSV records
GHSA-8wmf-6v46-5gfg
Trending
Rank 3 in indexed charts, since 18 Sept 2026. See the ranking →

Charts affected

1,355 by stars
ChartLatestAffected imagesRadar Score
nightingalexxl-job-adminVerified publisher0.2.111 of 6See more

nightingale xxl-job-admin 0.2.11

1 of the 6 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.28.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

9,743
ygdrassil-monitoringygdrassilVerified publisher0.4.02 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

2 of the 10 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0
1.45.0
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

9,528
prometheus-monitoring-stackyotron-helm-charts1.2.03 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

3 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0
quay.io/prometheus/alertmanager:latest690c7b525f43
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
quay.io/prometheus/prometheus:latest5ce7540c3c00
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

936
zahori-consulzahoriVerified publisher1.0.11 of 2See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0

Open the chart page →

5,077
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
altinity/metrics-exporter:latest8940ecadae65
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0

Open the chart page →

3,701

Container images carrying it

1,401 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/stashed/stash:v0.42.03a98245a7667
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.20.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0
go.opentelemetry.io/otel/sdk@v1.22.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.23.1
go.opentelemetry.io/otel/exporters/zipkin@v1.23.1
go.opentelemetry.io/otel/sdk@v1.23.1
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
go.opentelemetry.io/otel/exporters/zipkin@v1.23.1
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
1.45.0
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
go.opentelemetry.io/otel/exporters/zipkin@v1.23.1
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
1.45.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
go.opentelemetry.io/otel/exporters/zipkin@v1.23.1
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
1.45.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
go.opentelemetry.io/otel/exporters/zipkin@v1.23.1
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
1.45.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
go.opentelemetry.io/otel/exporters/zipkin@v1.23.1
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
1.45.0
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.39.0
go.opentelemetry.io/otel/exporters/zipkin@v1.39.0
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
go.opentelemetry.io/otel/exporters/zipkin@v1.23.1
go.opentelemetry.io/otel/sdk@v1.23.1
1.45.0
1.45.0
1
ghcr.io/strrl/supabase-operator:2026.7.2587d083ab8980
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/supabase-community/supabase-operator:v0.1.3253a6dcbf4f0
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.36.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
go.opentelemetry.io/otel/sdk@v1.14.0
1.45.0
1
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
go.opentelemetry.io/otel/sdk@v1.14.0
1.45.0
1
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.28.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.16.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.16.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.16.0
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/synapsecns/sanguine/screener-api:latestb3de2050460a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.28.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
go.opentelemetry.io/otel/sdk@v1.14.0
1.45.0
1
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.28.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.20.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.20.0
go.opentelemetry.io/otel/sdk@v1.21.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/syself/hetzner-cloud-controller-manager:v2.0.77d4a5e29c387
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/thereisnotime/warpgate-operator:0.4.15e3ce6905a7a4
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0
go.opentelemetry.io/otel/sdk@v1.19.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/traefik/hub-manager:v0.45.1d1cff2560c67
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.1-0.20260724222506-e12724f97a73
1.45.0
1.45.0
1.45.0
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0
1
ghcr.io/transparency-dev/tesseract/posix:v0.1.2b044edd23888
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/trianalab/pacto/operator:5.4.12af8d2357c86
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
1.45.0
1.45.0
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/upbothq/upbot-operator:v0.0.20e5da24947c91
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/valkey-io/valkey-operator:v0.6.052a0f1ed0c03
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.40.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/vedooo/reactive-policy:0.4.1d92eda891c91
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.40.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/voidmind-io/voidllm:0.0.250df11dd20c28
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.37.0
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/voyagermesh/gateway-converter:v0.0.1b92123805584
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.24.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.24.0
go.opentelemetry.io/otel/sdk@v1.24.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.40.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.23.1
go.opentelemetry.io/otel/sdk@v1.32.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/wasilak/go-hello-world:1.8.366d353e7693f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/wenkow/cert-manager-webhook-f5xc:0.5.3e9707caa8ca5
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
1.45.0
1.45.0
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
go.opentelemetry.io/otel/sdk@v1.24.0
1.45.0
1
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.27.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.27.0
go.opentelemetry.io/otel/sdk@v1.27.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.23.1
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/xmv-solutions-gmbh/cert-manager-webhook-hcloud-zones:0.1.5a7a846bba3e8
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.37.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/ydixken/pgcopydb-operator:v0.14.01198712d9bf7
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
ghcr.io/zufardhiyaulhaq/frp-operator:v0.11.0cd25ee354df2
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0
go.opentelemetry.io/otel/sdk@v1.19.0
1.45.0
1.45.0
1.45.0
1
mcr.microsoft.com/acstor/local-csi-driver:v0.3.0f9af53a79fd1
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
mcr.microsoft.com/acstor/local-csi-manager:v0.3.04f464b52ba85
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.