StackRadar

CVE-2026-81870

Low

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,384
of 17,813 indexed, latest versions
Container images
1,423
deployed by those charts
Fix available
6 of 6
affected packages

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Carried by container images the latest versions of 1,384 of 17,813 indexed charts deploy, on 1,423 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.6.3, v1.7.0, v1.8.0, v1.9.0+40 more1.45.01,398
go.opentelemetry.io/otel/exporters/otlp/otlptracegolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more1.45.01,115
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcgolangv1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more1.45.01,028
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpgolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more1.45.0439
go.opentelemetry.io/otel/exporters/zipkingolangv1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more1.45.037
kubernetes-1.36apk1.36.4-r81.36.4-r101
OSV records
CGA-2c9g-p4w2-5539GHSA-8wmf-6v46-5gfg
Also known as
CGA-3wf9-xxx4-3cwx, CGA-6492-hrx3-qqwg, CGA-7fm4-77h5-5xv5, CGA-7r7f-p2pr-7w6x, CGA-94hm-pgxc-g949, CGA-95h5-9cf3-7w6f, CGA-9v46-576g-p8q6, CGA-9w5x-grm4-mwqw, CGA-cmx9-cm4w-g6rc, CGA-cph3-6489-7mr5, CGA-f878-h3vr-ph69, CGA-f9g5-hvh2-cxwg, CGA-fgxv-46pw-wrrg, CGA-fjx9-g624-j5w2, CGA-g9fj-pqfm-pxhj, CGA-gvrh-v65x-4f64, CGA-hvph-q6vw-mp7h, CGA-jvxq-8v73-23wj, CGA-mf36-f5m8-jp98, CGA-mh5g-xj8h-63rj, CGA-p25p-9grf-8c4r, CGA-pgh3-5vjx-6h78, CGA-r2cr-m4m5-296p, CGA-rc9c-wr95-6pw5, CGA-wmp5-5fch-33v9, CGA-wwqw-q86j-r6j6, CGA-xgxm-29f7-q4c3, CGA-xv44-f9jp-whfv, CGA-xxjh-jh7q-vwjq
Trending
Rank 2 in indexed charts, since 18 Sept 2026. See the ranking →

Charts affected

1,384 by stars
ChartLatestAffected imagesRadar Score
wireguardslybase-wireguardVerified publisher2.0.61 of 1See more

wireguard slybase-wireguard 2.0.6

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
linuxserver/wireguard:1.0.20260223-r0-ls122dca67384e3e9
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0

Open the chart page →

478
smallest-self-hostsmallest-self-hostVerified publisher0.2.23 of 12See more

smallest-self-host smallest-self-host 0.2.2

3 of the 12 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.24.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.24.0
go.opentelemetry.io/otel/sdk@v1.24.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.20.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0
go.opentelemetry.io/otel/sdk@v1.20.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0
go.opentelemetry.io/otel/sdk@v1.21.0
1.45.0
1.45.0
1.45.0

Open the chart page →

7,730
aws-otel-collectorsnowplow-devopsVerified publisher0.16.01 of 1See more

aws-otel-collector snowplow-devops 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.49.0d2bdfff2c377
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

178
artifact-hubsoftonic1.19.03 of 8See more

artifact-hub softonic 1.19.0

3 of the 8 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
artifacthub/hub:v1.19.0111918d8c399
go.opentelemetry.io/otel/sdk@v1.27.0
1.45.0
artifacthub/scanner:v1.19.0323d026e78c3
go.opentelemetry.io/otel/sdk@v1.23.1
1.45.0
artifacthub/tracker:v1.19.06596c8c4d955
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.27.0
go.opentelemetry.io/otel/sdk@v1.23.1
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

14,621
thanossolidchartsVerified publisher0.12.21 of 1See more

thanos solidcharts 0.12.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

212
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0

Open the chart page →

2,035
stackradar-scannerstackradarVerified publisher0.4.01 of 1See more

stackradar-scanner stackradar 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/lockdep/stackradar-scanner:0.4.073cbeb990cf4
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0

Open the chart page →

1,223
graph-nodestakewise3.1.01 of 3See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ipfs/kubo:v0.24.0e3de33bd746b
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.16.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.16.0
go.opentelemetry.io/otel/exporters/zipkin@v1.14.0
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

4,741
thanosstevehipwell-helm-charts-thanosVerified publisher1.24.11 of 1See more

thanos stevehipwell-helm-charts-thanos 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

212
stornxstornxVerified publisher1.1.15 of 9See more

stornx stornx 1.1.1

5 of the 9 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
istio/pilot:1.29.1f8b0e412ac4a
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
quay.io/kiali/kiali:v2.23.07652b1285f50
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0
1.45.0
1.45.0
1.45.0
quay.io/prometheus/prometheus:v3.10.07571a304e67f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.40.0
go.opentelemetry.io/otel/sdk@v1.40.0
1.45.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.35.0
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
1.45.0
1.45.0

Open the chart page →

11,854
stunner-gateway-operatorstunner1.1.02 of 2See more

stunner-gateway-operator stunner 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
l7mp/stunner-auth-server:1.1.02f8114477ba6
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
l7mp/stunner-gateway-operator:1.1.0c34f7c931491
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0

Open the chart page →

1,300
supabasesupabse0.8.02 of 11See more

supabase supabse 0.8.0

2 of the 11 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.30.13b709e4a0e5e
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0
1.45.0
supabase/gotrue:v2.189.0385184459f57
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.40.0
go.opentelemetry.io/otel/sdk@v1.40.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

18,318
switchboardswitchboardVerified publisher0.7.41 of 1See more

switchboard switchboard 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/borchero/switchboard:0.7.454a193b757da
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.41.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.41.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.41.0
go.opentelemetry.io/otel/sdk@v1.41.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

872
tekton-events-relaytekton-events-relayVerified publisher0.10.11 of 1See more

tekton-events-relay tekton-events-relay 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/fabioluciano/tekton-events-relay:0.10.184cb5a2b8b81
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

296
tbotteleport-agent-kube18.11.11 of 1See more

tbot teleport-agent-kube 18.11.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/gravitational/tbot-distroless:18.11.1f64ff28fd9bd
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

383
toolhive-operatortoolhive-operator0.50.01 of 1See more

toolhive-operator toolhive-operator 0.50.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/stacklok/toolhive/operator:v0.50.07998095e6b99
go.opentelemetry.io/otel/exporters/zipkin@v1.35.0
1.45.0

Open the chart page →

6
traefikeetraefikOfficialVerified publisher4.2.101 of 2See more

traefikee traefik 4.2.10

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
traefik/traefikee:v2.12.10acc7fcca5f1c
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

561
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0

Open the chart page →

3,192
starboard-operatortrivy-operator0.10.251 of 1See more

starboard-operator trivy-operator 0.10.25

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
aquasec/starboard-operator:0.15.38e0b1c7ddc843
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0

Open the chart page →

320
guardrails-agent-kubernetesturbotVerified publisher0.3.01 of 1See more

guardrails-agent-kubernetes turbot 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0

Open the chart page →

4,104
tyk-operatortyk-helm1.4.21 of 1See more

tyk-operator tyk-helm 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
tykio/tyk-operator:v1.4.2e13d37f298b7
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

148
understudyunderstudyVerified publisher0.4.21 of 1See more

understudy understudy 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/kylan11/understudy:0.4.24454589d3884
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

32
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/upbothq/upbot-operator:v0.0.20e5da24947c91
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0

Open the chart page →

4,487
vault-config-operatorvault-config-operator1.0.21 of 1See more

vault-config-operator vault-config-operator 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/redhat-cop/vault-config-operator:v1.0.2e191cd9545d9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

122
vault-gcp-secretsvault-gcp-secrets1.19.51 of 1See more

vault-gcp-secrets vault-gcp-secrets 1.19.5

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0

Open the chart page →

2,448
warpgate-operatorwarpgate-operator0.4.111 of 1See more

warpgate-operator warpgate-operator 0.4.11

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/thereisnotime/warpgate-operator:0.4.15e3ce6905a7a4
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

7
harborwener1.19.24 of 8See more

harbor wener 1.19.2

4 of the 8 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.15.2d7b780d23721
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
goharbor/harbor-jobservice:v2.15.2f71a4452a095
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,739
kube-prometheus-stackwenerme91.4.13 of 6See more

kube-prometheus-stack wenerme 91.4.1

3 of the 6 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
quay.io/prometheus-operator/prometheus-operator:v0.94.0cf153f64d6c3
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
1.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

682
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

8,503
yugawareyugabyteVerified publisher2026.1.11 of 3See more

yugaware yugabyte 2026.1.1

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
prom/prometheus:v3.12.069f524141883
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

2,701
cloudflare-zero-trust-operatorzelic-io0.7.11 of 1See more

cloudflare-zero-trust-operator zelic-io 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/bojanzelic/cloudflare-zero-trust-operator:0.7.1f4b2dbc19a78
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0

Open the chart page →

591
cert-manager-webhook-bunnyaardbol-cert-manager-webhook-bunnyVerified publisher1.4.21 of 1See more

cert-manager-webhook-bunny aardbol-cert-manager-webhook-bunny 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/aardbol/cert-manager-webhook-bunny:v1.4.1be5e446c5ed5
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

26
gobackupadnoctemVerified publisher0.4.01 of 1See more

gobackup adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
huacnlee/gobackup:v3.1.1560be93229a5
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.20.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0
go.opentelemetry.io/otel/sdk@v1.20.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,843
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0

Open the chart page →

30,707
aerospike-kubernetes-operatoraerospike4.5.01 of 1See more

aerospike-kubernetes-operator aerospike 4.5.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
aerospike/aerospike-kubernetes-operator:4.5.070a9eeb991b8
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

638
aerospike-backup-serviceaerospike-helmVerified publisher2.0.131 of 1See more

aerospike-backup-service aerospike-helm 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
aerospike/aerospike-backup-service:3.5.1be40d709c583
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0

Open the chart page →

637
agentkube-operatoragentkube-operator0.3.01 of 1See more

agentkube-operator agentkube-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.14.0
go.opentelemetry.io/otel/sdk@v1.14.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,734
airbyteairbyte-v2Verified publisher2.3.01 of 10See more

airbyte airbyte-v2 2.3.0

1 of the 10 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
temporalio/auto-setup:1.27.2b44cbfeb43db
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.35.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0

Open the chart page →

12,176
akeyless-gatewayakeyless-services-helmVerified publisher3.5.61 of 2See more

akeyless-gateway akeyless-services-helm 3.5.6

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
akeyless/gateway:5.4.0d4768a9b089c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,415
aktoakto0.2.01 of 7See more

akto akto 0.2.0

1 of the 7 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
go.opentelemetry.io/otel/sdk@v1.32.0
1.45.0

Open the chart page →

13,798
akto-hybrid-redactakto1.44.71 of 5See more

akto-hybrid-redact akto 1.44.7

1 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
go.opentelemetry.io/otel/sdk@v1.32.0
1.45.0

Open the chart page →

4,863
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.01eb61443d68e
go.opentelemetry.io/otel/sdk@v1.32.0
1.45.0

Open the chart page →

6,659
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
go.opentelemetry.io/otel/sdk@v1.32.0
1.45.0

Open the chart page →

6,432
akto-protectionakto0.1.01 of 4See more

akto-protection akto 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
go.opentelemetry.io/otel/sdk@v1.32.0
1.45.0

Open the chart page →

11,316
akto-testing-db-layerakto1.42.171 of 2See more

akto-testing-db-layer akto 1.42.17

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
go.opentelemetry.io/otel/sdk@v1.32.0
1.45.0

Open the chart page →

36,090
wireguardalexpressoVerified publisher0.1.71 of 2See more

wireguard alexpresso 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
linuxserver/wireguard:latestdca67384e3e9
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0

Open the chart page →

478
alluredeckalluredeckVerified publisher0.24.01 of 2See more

alluredeck alluredeck 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,301
book-serveral-masood-helm-charts0.1.01 of 1See more

book-server al-masood-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
almasood/book-server:latest6ffac9b63cdf
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0

Open the chart page →

494
flux-suspension-exporteralpineworks0.1.11 of 1See more

flux-suspension-exporter alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/flux-suspension-exporter:v1.0.0341f0a6cd2b6
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0

Open the chart page →

572
flux-suspensions-exporteralpineworks0.1.01 of 1See more

flux-suspensions-exporter alpineworks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/flux-suspension-exporter:v1.0.0341f0a6cd2b6
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0

Open the chart page →

572

Container images carrying it

1,423 by charts deploying them

A fixed version is listed for 6 of the 6 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v0.5.4be477ba317d8
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.34.07b172f42533c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/capi-operator/cluster-api-operator:v0.29.0465e72f8b06a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.15.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.15.1
go.opentelemetry.io/otel/sdk@v1.15.1
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0
1
registry.k8s.io/etcd:3.6.4-0e36c08168342
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0
go.opentelemetry.io/otel/sdk@v1.20.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0
go.opentelemetry.io/otel/sdk@v1.19.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0
go.opentelemetry.io/otel/sdk@v1.10.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0
go.opentelemetry.io/otel/sdk@v1.10.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0
go.opentelemetry.io/otel/sdk@v1.10.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kwok/kwok:v0.8.06d25aa8fbdfe
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0
go.opentelemetry.io/otel/sdk@v1.21.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0
go.opentelemetry.io/otel/sdk@v1.21.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.20.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0
go.opentelemetry.io/otel/sdk@v1.20.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.1e6a43c83ab16
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0
go.opentelemetry.io/otel/sdk@v1.10.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.36.0e354e40db2d0
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.