CVE-2026-81870
LowAdvisory
Published 17 Sept 2026In the index since 18 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 2.0
- base score, highest
- EPSS
- 0.002
- 9th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,384
- of 17,813 indexed, latest versions
- Container images
- 1,423
- deployed by those charts
- Fix available
- 6 of 6
- affected packages
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
Carried by container images the latest versions of 1,384 of 17,813 indexed charts deploy, on 1,423 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.8.0, v1.9.0+40 more | 1.45.0 | 1,398 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more | 1.45.0 | 1,115 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more | 1.45.0 | 1,028 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more | 1.45.0 | 439 |
| go.opentelemetry.io/ | v1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more | 1.45.0 | 37 |
| kubernetes-1.36apk | 1.36.4-r8 | 1.36.4-r10 | 1 |
- OSV records
- CGA-2c9g-p4w2-5539GHSA-8wmf-6v46-5gfg
- Also known as
- CGA-3wf9-xxx4-3cwx, CGA-6492-hrx3-qqwg, CGA-7fm4-77h5-5xv5, CGA-7r7f-p2pr-7w6x, CGA-94hm-pgxc-g949, CGA-95h5-9cf3-7w6f, CGA-9v46-576g-p8q6, CGA-9w5x-grm4-mwqw, CGA-cmx9-cm4w-g6rc, CGA-cph3-6489-7mr5, CGA-f878-h3vr-ph69, CGA-f9g5-hvh2-cxwg, CGA-fgxv-46pw-wrrg, CGA-fjx9-g624-j5w2, CGA-g9fj-pqfm-pxhj, CGA-gvrh-v65x-4f64, CGA-hvph-q6vw-mp7h, CGA-jvxq-8v73-23wj, CGA-mf36-f5m8-jp98, CGA-mh5g-xj8h-63rj, CGA-p25p-9grf-8c4r, CGA-pgh3-5vjx-6h78, CGA-r2cr-m4m5-296p, CGA-rc9c-wr95-6pw5, CGA-wmp5-5fch-33v9, CGA-wwqw-q86j-r6j6, CGA-xgxm-29f7-q4c3, CGA-xv44-f9jp-whfv, CGA-xxjh-jh7q-vwjq
- Trending
- Rank 2 in indexed charts, since 18 Sept 2026. See the ranking →
Charts affected
1,384 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| kube-prometheus-stackprometheus-communityOfficialVerified publisher | 91.4.1 | 3 of 6See more | 682 |
| cert-managercert-managerOfficialVerified publisher | 1.21.2 | 2 of 4See more | 30 |
| argo-cdargoOfficialVerified publisher | 10.9.2 | 2 of 3See more | 3,043 |
| prometheusprometheus-communityOfficialVerified publisher | 29.31.1 | 3 of 6See more | 466 |
| traefiktraefikOfficialVerified publisher | 41.6.0 | 1 of 1See more | 171 |
| lokigrafana | 7.3.0 | 2 of 6See more | 3,958 |
| metrics-servermetrics-serverVerified publisher | 3.14.0 | 1 of 1See more | 171 |
| vaulthashicorpVerified publisher | 0.34.1 | 1 of 2See more | 552 |
| gitlabgitlabVerified publisher | 10.4.0 | 10 of 21See more | 16,550 |
| harborharborOfficialVerified publisher | 1.19.2 | 4 of 8See more | 1,739 |
| external-secretsexternal-secrets-operatorVerified publisher | 2.10.0 | 1 of 1See more | 89 |
| velerovmware-tanzu | 12.2.0 | 1 of 1See more | 1,101 |
| metallbmetallbVerified publisher | 0.16.1 | 3 of 4See more | 2,176 |
| rancherrancher-stable | 2.15.1 | 2 of 2See more | 1,534 |
| kedakedacore | 2.20.2 | 3 of 3See more | 1,133 |
| nginx-ingressnginxVerified publisher | 2.7.3 | 1 of 1See more | 1,131 |
| artifact-hubartifact-hubVerified publisher | 1.23.0 | 3 of 7See more | 11,043 |
| kube-state-metricsprometheus-communityVerified publisher | 8.5.0 | 1 of 1See more | 96 |
| alloygrafana | 1.12.1 | 1 of 2See more | 1,191 |
| deschedulerdescheduler | 0.36.0 | 1 of 1See more | 583 |
| argo-cdargo-cd-oci | 10.9.2 | 2 of 3See more | 3,043 |
| jupyterhubjupyterhubOfficialVerified publisher | 4.4.2 | 1 of 7See more | 8,323 |
| jaegerjaegertracingOfficialVerified publisher | 4.13.1 | 1 of 1See more | 320 |
| mimir-distributedgrafana | 6.2.0 | 3 of 6See more | 4,699 |
| argocd-image-updaterargoOfficialVerified publisher | 1.3.1 | 1 of 1See more | 733 |
| headlampheadlampOfficialVerified publisher | 0.45.0 | 1 of 1See more | 248 |
| dexdexVerified publisher | 0.24.1 | 1 of 1See more | 1,777 |
| uptime-kumauptime-kumaVerified publisher | 4.2.0 | 1 of 1See more | 30,832 |
| falcofalcosecurity | 9.1.0 | 3 of 3See more | 5,535 |
| alertmanagerprometheus-communityOfficialVerified publisher | 2.0.0 | 1 of 2See more | 56 |
| kongkongOfficialVerified publisher | 3.4.1 | 1 of 2See more | 833 |
| rook-cephrookOfficialVerified publisher | 1.20.7 | 1 of 2See more | 1,473 |
| grafanagrafana-communityVerified publisher | 13.2.5 | 1 of 1See more | 449 |
| argo-eventsargoOfficialVerified publisher | 2.4.27 | 1 of 1See more | 1,093 |
| victoria-metrics-k8s-stackvictoriametricsVerified publisher | 0.92.1 | 3 of 7See more | 1,955 |
| openebsopenebsOfficialVerified publisher | 4.6.1 | 6 of 35See more | 24,368 |
| prometheus-adapterprometheus-communityOfficialVerified publisher | 5.3.0 | 1 of 1See more | 945 |
| apisixapisix | 2.17.0 | 1 of 3See more | 3,187 |
| miniominio-official | 5.4.0 | 1 of 2See more | 2,614 |
| opencostopencostOfficialVerified publisher | 2.5.31 | 1 of 2See more | 275 |
| openfaasopenfaas | 15.0.13 | 2 of 6See more | 3,581 |
| flux2fluxcd-community | 2.19.1 | 3 of 7See more | 2,467 |
| jaeger-operatorjaegertracingOfficialVerified publisher | 2.57.0 | 1 of 1See more | 569 |
| vault-secrets-operatorhashicorpVerified publisher | 1.5.1 | 1 of 2See more | 1,061 |
| linkerd-vizlinkerd2Verified publisher | 30.12.11 | 1 of 5See more | 1,385 |
| gatekeepergatekeeperVerified publisher | 3.23.1 | 1 of 3See more | 511 |
| snapshot-controllerpiraeus-chartsVerified publisher | 5.3.0 | 1 of 1See more | 242 |
| k10kastenVerified publisher | 9.0.5 | 1 of 23See more | 2,677 |
| ceph-csi-cephfsceph-csiOfficialVerified publisher | 3.17.1 | 4 of 6See more | 4,144 |
| ceph-csi-rbdceph-csiOfficialVerified publisher | 3.17.1 | 4 of 6See more | 4,144 |
Container images carrying it
1,423 by charts deploying them
A fixed version is listed for 6 of the 6 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 9d01bf9c9224 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | e5da24947c91 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | 52a0f1ed0c03 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | d92eda891c91 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | 0df11dd20c28 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | 13fd0cccafe8 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | 23f4da194134 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | b92123805584 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | 4964ceaf9d35 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | 21715979aefa | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | 66d353e7693f | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | e9707caa8ca5 | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 1 |
| ghcr.io/ | 49800ff775f3 | go.opentelemetry.io/ | 1.45.0 | 1 |
| ghcr.io/ | efb69ec3330c | go.opentelemetry.io/ | 1.45.0 | 1 |
| ghcr.io/ | 5a6fe78d4d15 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | 5afcab98d9d7 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | a7a846bba3e8 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | 06096c6ec357 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | cd25ee354df2 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | f9af53a79fd1 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | 4f464b52ba85 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | 844922d58d76 | go.opentelemetry.io/ | 1.45.0 | 1 |
| mcr.microsoft.com/ | 6e43ba0bd009 | go.opentelemetry.io/ | 1.45.0 | 1 |
| mcr.microsoft.com/ | f9e20264150a | go.opentelemetry.io/ | 1.45.0 | 1 |
| mcr.microsoft.com/ | fb66f5078eb6 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | 3632b6b02eba | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | 78456dbd1a64 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | 8b3ce8339944 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | e656117a7f5b | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | 5f91243cfd60 | go.opentelemetry.io/ | 1.45.0 | 1 |
| public.ecr.aws/ | 1eb61443d68e | go.opentelemetry.io/ | 1.45.0 | 1 |
| public.ecr.aws/ | b654b266fa32 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 9ad31fb4e5be | go.opentelemetry.io/ | 1.45.0 | 1 |
| public.ecr.aws/ | 8aa9ea5f67b8 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | d2bdfff2c377 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 16e7f5c7161e | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | f12da9edb687 | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 344672a6d3a7 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 3e9480a608a1 | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | f4925b15ce94 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | f1348a65664a | go.opentelemetry.io/ | 1.45.0 | 1 |
| public.ecr.aws/ | 87cbd356af2e | go.opentelemetry.io/ | 1.45.0 | 1 |
| public.ecr.aws/ | 52281db48c93 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | e7e1db003e6a | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | bcfca8a86396 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | b2e66434dfd9 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | d80a92396d00 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 60d29113b5b3 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 22b71780d403 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 5e7b50759e39 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |