StackRadar

CVE-2026-81870

Low

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,343
of 17,821 indexed, latest versions
Container images
1,376
deployed by those charts
Fix available
5 of 5
affected packages

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Carried by container images the latest versions of 1,343 of 17,821 indexed charts deploy, on 1,376 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.6.3, v1.7.0, v1.8.0, v1.9.0+40 more1.45.01,354
go.opentelemetry.io/otel/exporters/otlp/otlptracegolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more1.45.01,077
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcgolangv1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more1.45.0996
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpgolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more1.45.0420
go.opentelemetry.io/otel/exporters/zipkingolangv1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more1.45.037
OSV records
GHSA-8wmf-6v46-5gfg
Trending
Rank 3 in indexed charts, since 18 Sept 2026. See the ranking →

Charts affected

1,343 by stars
ChartLatestAffected imagesRadar Score
teleport-plugin-emailteleport-agent-kube18.11.11 of 1See more

teleport-plugin-email teleport-agent-kube 18.11.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/gravitational/teleport-plugin-email:18.11.1b2e66434dfd9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

126
teleport-plugin-event-handlerteleport-agent-kube18.11.11 of 1See more

teleport-plugin-event-handler teleport-agent-kube 18.11.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/gravitational/teleport-plugin-event-handler:18.11.1d80a92396d00
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

11
teleport-plugin-jirateleport-agent-kube18.11.11 of 1See more

teleport-plugin-jira teleport-agent-kube 18.11.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/gravitational/teleport-plugin-jira:18.11.160d29113b5b3
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

126
teleport-plugin-mattermostteleport-agent-kube18.11.11 of 1See more

teleport-plugin-mattermost teleport-agent-kube 18.11.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/gravitational/teleport-plugin-mattermost:18.11.122b71780d403
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

126
teleport-plugin-msteamsteleport-agent-kube18.11.11 of 1See more

teleport-plugin-msteams teleport-agent-kube 18.11.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/gravitational/teleport-plugin-msteams:18.11.15e7b50759e39
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

126
teleport-plugin-pagerdutyteleport-agent-kube18.11.11 of 1See more

teleport-plugin-pagerduty teleport-agent-kube 18.11.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/gravitational/teleport-plugin-pagerduty:18.11.14974f23f3ab8
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

126
teleport-plugin-slackteleport-agent-kube18.11.11 of 1See more

teleport-plugin-slack teleport-agent-kube 18.11.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/gravitational/teleport-plugin-slack:18.11.16017561c58b5
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

126
temporaltemporal0.28.92 of 13See more

temporal temporal 0.28.9

2 of the 13 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.22.0836af062af30
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.16.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.16.0
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0
1.45.0
1.45.0
temporalio/server:1.22.0ddeebf8bad8f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.11.2
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.16.0
go.opentelemetry.io/otel/sdk@v1.11.2
1.45.0
1.45.0
1.45.0

Open the chart page →

21,062
temporal-proxytemporalio0.2.11 of 1See more

temporal-proxy temporalio 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
temporalio/temporal-proxy:v0.5.0e9dc65181b93
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

129
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0

Open the chart page →

7,529
todolist-charttodolist-chart0.1.72 of 10See more

todolist-chart todolist-chart 0.1.7

2 of the 10 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0
quay.io/prometheus/prometheus:latest5ce7540c3c00
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

7,087
netbirdtotmicro1.8.23 of 4See more

netbird totmicro 1.8.2

3 of the 4 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
netbirdio/management:0.60.252682e5f48f9
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
netbirdio/relay:0.60.2a10762533793
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
netbirdio/signal:0.60.267176bcbf6ab
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0

Open the chart page →

6,081
hub-managertraefikVerified publisher1.0.01 of 1See more

hub-manager traefik 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/traefik/hub-manager:v0.45.1d1cff2560c67
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.1-0.20260724222506-e12724f97a73
1.45.0
1.45.0
1.45.0

Open the chart page →

649
traktortraktorVerified publisher0.0.171 of 1See more

traktor traktor 0.0.17

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
gdxbsv/traktor:0.0.17675693335054
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0

Open the chart page →

382
cicd-proxytremolo1.0.121 of 1See more

cicd-proxy tremolo 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/tremolosecurity/kube-oidc-proxy:1.0.13a89736c586ba
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

419
orchestratremolo3.1.562 of 5See more

orchestra tremolo 3.1.56

2 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.45.0db3f0e0fc58d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
ghcr.io/tremolosecurity/kube-oidc-proxy:1.0.13a89736c586ba
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

3,013
orchestra-kube-oidc-proxytremolo1.0.191 of 1See more

orchestra-kube-oidc-proxy tremolo 1.0.19

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/tremolosecurity/kube-oidc-proxy:1.0.13a89736c586ba
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

419
trident-protecttrident-protect100.2606.01 of 2See more

trident-protect trident-protect 100.2606.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
netapp/controller:26.06.08235a77cfc92
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,379
trident-protect-bxp-previewtrident-protect100.2511.0-bxp-preview1 of 3See more

trident-protect-bxp-preview trident-protect 100.2511.0-bxp-preview

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
netapp/controller:25.11.0-bxp-preview06f6c9a0653f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.32.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.32.0
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
1.45.0
1.45.0

Open the chart page →

2,201
trident-protect-consoletrident-protect100.2608.0-console1 of 3See more

trident-protect-console trident-protect 100.2608.0-console

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
netapp/controller:26.08.0-console09c6cc6b5f71
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,370
harbor-scanner-trivytrivy-operator0.31.21 of 1See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.31.26e790e233872
go.opentelemetry.io/otel/sdk@v1.24.0
1.45.0

Open the chart page →

2,489
clickhouse-operatortruefoundryVerified publisher0.1.11 of 3See more

clickhouse-operator truefoundry 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.23.34baec90b20cd
go.opentelemetry.io/otel/sdk@v1.19.0
1.45.0

Open the chart page →

1,432
tfy-cloudflaredtruefoundryVerified publisher0.6.01 of 2See more

tfy-cloudflared truefoundry 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
go.opentelemetry.io/otel/sdk@v1.13.0
1.45.0

Open the chart page →

2,035
tfy-inferentia-operatortruefoundryVerified publisher0.2.81 of 3See more

tfy-inferentia-operator truefoundry 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0
go.opentelemetry.io/otel/sdk@v1.20.0
1.45.0
1.45.0
1.45.0

Open the chart page →

2,926
tfy-llm-gateway-infratruefoundryVerified publisher0.2.102 of 3See more

tfy-llm-gateway-infra truefoundry 0.2.10

2 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.23.774315beb57db
go.opentelemetry.io/otel/sdk@v1.24.0
1.45.0
altinity/metrics-exporter:0.23.7a4d7ff0c727e
go.opentelemetry.io/otel/sdk@v1.24.0
1.45.0

Open the chart page →

1,210
truefoundry-monitoringtruefoundryVerified publisher0.1.62 of 8See more

truefoundry-monitoring truefoundry 0.1.6

2 of the 8 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0
1.45.0
1.45.0

Open the chart page →

4,600
tyk-control-planetyk-helm5.3.03 of 7See more

tyk-control-plane tyk-helm 5.3.0

3 of the 7 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
tykio/tyk-dashboard:v5.13.10e03b94c153d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0
tykio/tyk-gateway-ee:v5.13.13e907e675bf9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0
tykio/tyk-mdcb-docker:v2.12.0942a5b8bf847
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

3,266
tyk-dashboardtyk-helm5.3.01 of 1See more

tyk-dashboard tyk-helm 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
tykio/tyk-dashboard:v5.13.10e03b94c153d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

815
tyk-data-planetyk-helm5.3.01 of 3See more

tyk-data-plane tyk-helm 5.3.0

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
tykio/tyk-gateway-ee:v5.13.13e907e675bf9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,011
tyk-dev-portaltyk-helm5.3.01 of 2See more

tyk-dev-portal tyk-helm 5.3.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
tykio/portal:v1.18.092509e00e618
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

916
tyk-mdcbtyk-helm5.3.01 of 1See more

tyk-mdcb tyk-helm 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
tykio/tyk-mdcb-docker:v2.12.0942a5b8bf847
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

166
tyk-stacktyk-helm5.3.02 of 7See more

tyk-stack tyk-helm 5.3.0

2 of the 7 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
tykio/tyk-dashboard:v5.13.10e03b94c153d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0
tykio/tyk-gateway-ee:v5.13.13e907e675bf9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

3,200
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.35.0
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
1.45.0
1.45.0

Open the chart page →

46,016
upcloud-csiupcloud-csiVerified publisher1.18.05 of 7See more

upcloud-csi upcloud-csi 1.18.0

5 of the 7 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.40.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,924
vals-operatorvals-operatorVerified publisher0.8.11 of 1See more

vals-operator vals-operator 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/digitalis-io/vals-operator:v0.8.17c776499b8c9
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0

Open the chart page →

730
vault-sync-operatorvault-sync-operatorVerified publisher0.1.11 of 1See more

vault-sync-operator vault-sync-operator 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/danieldonoghue/vault-sync-operator:v0.0.1-beta.38d7ec69a193c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

277
velero-clientvelero-clientVerified publisher1.4.21 of 1See more

velero-client velero-client 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0

Open the chart page →

548
velkirvelkir0.1.21 of 1See more

velkir velkir 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/ioxie/velkir/manager:v0.1.202c657d62d1d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

138
verticadb-operatorvertica-chartsVerified publisher26.2.21 of 1See more

verticadb-operator vertica-charts 26.2.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
opentext/verticadb-operator:26.2.2-04ad44e44476c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

82
corednsvks-helm-chartsVerified publisher1.45.01 of 1See more

coredns vks-helm-charts 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0

Open the chart page →

923
voidllmvoidllmVerified publisher0.0.251 of 1See more

voidllm voidllm 0.0.25

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/voidmind-io/voidllm:0.0.250df11dd20c28
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

291
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.37.0
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0
1.45.0
1.45.0

Open the chart page →

4,088
consulwarjiang1.3.01 of 2See more

consul warjiang 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
hashicorp/consul:1.17.0712fe02d2f84
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0

Open the chart page →

4,102
eth-validatorwateim1.4.51 of 3See more

eth-validator wateim 1.4.5

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ethereum/client-go:latest37575ec10fbc
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.41.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.41.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.41.0
go.opentelemetry.io/otel/sdk@v1.41.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

5,142
valkey-operatorwellcakeVerified publisher0.8.11 of 1See more

valkey-operator wellcake 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/melancholictheory/wellcake:0.8.12fd2678f07ef
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.36.0
1.45.0
1.45.0
1.45.0

Open the chart page →

124
alertmanagerwener2.0.01 of 2See more

alertmanager wener 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

56
apisixwener2.17.01 of 3See more

apisix wener 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0

Open the chart page →

3,187
apisix-ingress-controllerwener1.4.01 of 2See more

apisix-ingress-controller wener 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,719
argo-cdwener10.9.22 of 3See more

argo-cd wener 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

3,043
argocd-image-updaterwener1.3.11 of 1See more

argocd-image-updater wener 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

733

Container images carrying it

1,376 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.42.0
go.opentelemetry.io/otel/sdk@v1.42.0
1.45.0
1.45.0
1.45.0
1.45.0
1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0
go.opentelemetry.io/otel/sdk@v1.36.0
1.45.0
1.45.0
1.45.0
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v0.5.4be477ba317d8
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.34.07b172f42533c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/capi-operator/cluster-api-operator:v0.29.0465e72f8b06a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.15.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.15.1
go.opentelemetry.io/otel/sdk@v1.15.1
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0
1
registry.k8s.io/etcd:3.6.4-0e36c08168342
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0
go.opentelemetry.io/otel/sdk@v1.20.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0
go.opentelemetry.io/otel/sdk@v1.19.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0
go.opentelemetry.io/otel/sdk@v1.10.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0
go.opentelemetry.io/otel/sdk@v1.10.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0
go.opentelemetry.io/otel/sdk@v1.10.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kwok/kwok:v0.8.06d25aa8fbdfe
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0
go.opentelemetry.io/otel/sdk@v1.21.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0
go.opentelemetry.io/otel/sdk@v1.21.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.20.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0
go.opentelemetry.io/otel/sdk@v1.20.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.1e6a43c83ab16
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0
go.opentelemetry.io/otel/sdk@v1.10.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.36.0e354e40db2d0
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.