CVE-2026-81870
LowAdvisory
Published 17 Sept 2026In the index since 18 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 2.0
- base score, highest
- EPSS
- 0.002
- 9th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,355
- of 17,828 indexed, latest versions
- Container images
- 1,405
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
Carried by container images the latest versions of 1,355 of 17,828 indexed charts deploy, on 1,405 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.8.0, v1.9.0+40 more | 1.45.0 | 1,378 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more | 1.45.0 | 1,098 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more | 1.45.0 | 1,012 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more | 1.45.0 | 427 |
| go.opentelemetry.io/ | v1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more | 1.45.0 | 38 |
- OSV records
- GHSA-8wmf-6v46-5gfg
- Trending
- Rank 5 in indexed charts, since 18 Sept 2026. See the ranking →
Charts affected
1,355 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| nightingalexxl-job-adminVerified publisher | 0.2.11 | 1 of 6See more | 9,769 |
| ygdrassil-monitoringygdrassilVerified publisher | 0.4.0 | 2 of 10See more | 9,530 |
| prometheus-monitoring-stackyotron-helm-charts | 1.2.0 | 3 of 3See more | 936 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 1 of 2See more | 5,077 |
| posthogzeet | 0.23.2 | 1 of 9See more | 3,702 |
Container images carrying it
1,405 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 1198712d9bf7 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| ghcr.io/ | cd25ee354df2 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | f9af53a79fd1 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | 4f464b52ba85 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | 844922d58d76 | go.opentelemetry.io/ | 1.45.0 | 1 |
| mcr.microsoft.com/ | c3c80b940df6 | go.opentelemetry.io/ | 1.45.0 | 1 |
| mcr.microsoft.com/ | f99f5f7ae5fb | go.opentelemetry.io/ | 1.45.0 | 1 |
| mcr.microsoft.com/ | fb66f5078eb6 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | 78456dbd1a64 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | 8b3ce8339944 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | e656117a7f5b | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| mcr.microsoft.com/ | 5f91243cfd60 | go.opentelemetry.io/ | 1.45.0 | 1 |
| public.ecr.aws/ | 1eb61443d68e | go.opentelemetry.io/ | 1.45.0 | 1 |
| public.ecr.aws/ | b654b266fa32 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 9ad31fb4e5be | go.opentelemetry.io/ | 1.45.0 | 1 |
| public.ecr.aws/ | 7968fb60db6a | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 8aa9ea5f67b8 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 16e7f5c7161e | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | f12da9edb687 | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 344672a6d3a7 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 3e9480a608a1 | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | f4925b15ce94 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | f1348a65664a | go.opentelemetry.io/ | 1.45.0 | 1 |
| public.ecr.aws/ | 87cbd356af2e | go.opentelemetry.io/ | 1.45.0 | 1 |
| public.ecr.aws/ | 52281db48c93 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | e7e1db003e6a | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | bcfca8a86396 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | b2e66434dfd9 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | d80a92396d00 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 60d29113b5b3 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 22b71780d403 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 5e7b50759e39 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 4974f23f3ab8 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 6017561c58b5 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | ee9d973e3952 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | bf9db911deed | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | af8cea3b8538 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | e8014c6c58b6 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 1d548e59c2c8 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| public.ecr.aws/ | 6458fcd61e0c | go.opentelemetry.io/ | 1.45.0 | 1 |
| public.ecr.aws/ | a94d2d4aae85 | go.opentelemetry.io/ | 1.45.0 | 1 |
| public.ecr.aws/ | 1afcfbc000e0 | go.opentelemetry.io/ | 1.45.0 | 1 |
| public.ecr.aws/ | 651739583336 | go.opentelemetry.io/ | 1.45.0 | 1 |
| public.ecr.aws/ | 08c90bd040bf | go.opentelemetry.io/ | 1.45.0 | 1 |
| quay.io/ | 0deb1a1c9176 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| quay.io/ | 5b6701d8fb31 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| quay.io/ | 83c86003b781 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| quay.io/ | 95b5cf7ba6fe | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| quay.io/ | a36ab0c0860c | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| quay.io/ | acaf37352569 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |