CVE-2026-81870

Low

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026

Severity: Low; worst across findings
CVSS: 2.0; base score, highest
EPSS: 0.002; 9th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,384; of 17,813 indexed, latest versions
Container images: 1,423; deployed by those charts
Fix available: 6 of 6; affected packages

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Carried by container images the latest versions of 1,384 of 17,813 indexed charts deploy, on 1,423 images.

Affected package	Affected versions	Fixed in	Images
go.opentelemetry.io/otel/sdkgolang	v1.6.3, v1.7.0, v1.8.0, v1.9.0+40 more	1.45.0	1,398
go.opentelemetry.io/otel/exporters/otlp/otlptracegolang	v1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more	1.45.0	1,115
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcgolang	v1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more	1.45.0	1,028
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpgolang	v1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more	1.45.0	439
go.opentelemetry.io/otel/exporters/zipkingolang	v1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more	1.45.0	37
kubernetes-1.36apk	1.36.4-r8	1.36.4-r10	1

OSV records: CGA-2c9g-p4w2-5539 GHSA-8wmf-6v46-5gfg
Also known as: CGA-3wf9-xxx4-3cwx, CGA-6492-hrx3-qqwg, CGA-7fm4-77h5-5xv5, CGA-7r7f-p2pr-7w6x, CGA-94hm-pgxc-g949, CGA-95h5-9cf3-7w6f, CGA-9v46-576g-p8q6, CGA-9w5x-grm4-mwqw, CGA-cmx9-cm4w-g6rc, CGA-cph3-6489-7mr5, CGA-f878-h3vr-ph69, CGA-f9g5-hvh2-cxwg, CGA-fgxv-46pw-wrrg, CGA-fjx9-g624-j5w2, CGA-g9fj-pqfm-pxhj, CGA-gvrh-v65x-4f64, CGA-hvph-q6vw-mp7h, CGA-jvxq-8v73-23wj, CGA-mf36-f5m8-jp98, CGA-mh5g-xj8h-63rj, CGA-p25p-9grf-8c4r, CGA-pgh3-5vjx-6h78, CGA-r2cr-m4m5-296p, CGA-rc9c-wr95-6pw5, CGA-wmp5-5fch-33v9, CGA-wwqw-q86j-r6j6, CGA-xgxm-29f7-q4c3, CGA-xv44-f9jp-whfv, CGA-xxjh-jh7q-vwjq
Trending: Rank 2 in indexed charts, since 18 Sept 2026. See the ranking →

Charts affected

1,384 by stars

Chart

Latest

Affected images

Radar Score

hammerspace-csihscsi

1.2.8

1 of 6 See more

hammerspace-csi hscsi 1.2.8

1 of the 6 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
hammerspaceinc/csi-plugin :v1.2.8-rc2	395bee4504fc	go.opentelemetry.io/otel/sdk@v1.33.0	1.45.0

Open the chart page →

4,519

cac-systemhuangchengwu-helm-chart

0.1.0

3 of 9 See more

cac-system huangchengwu-helm-chart 0.1.0

3 of the 9 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
huangchengwu6904/hi-app :cac-1691047806	1b932f8221a9	go.opentelemetry.io/otel/sdk@v1.16.0	1.45.0
quay.io/jetstack/cert-manager-controller :v1.12.0	4a9d0264055b	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.15.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.15.0 go.opentelemetry.io/otel/sdk@v1.15.0	1.45.0 1.45.0 1.45.0
quay.io/jetstack/cert-manager-webhook :v1.12.0	ec4306b243d9	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.15.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.15.0 go.opentelemetry.io/otel/sdk@v1.15.0	1.45.0 1.45.0 1.45.0

Open the chart page →

11,265

jaegerhuseyinbabal

0.1.0

2 of 3 See more

jaeger huseyinbabal 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :latest	ab6f1a1f0fb4	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0 go.opentelemetry.io/otel/sdk@v1.38.0	1.45.0 1.45.0 1.45.0
quay.io/prometheus/prometheus :latest	5ce7540c3c00	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

1,625

vcwaltidi4trust

0.0.19

1 of 1 See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.14.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.14.0 go.opentelemetry.io/otel/sdk@v1.14.0	1.45.0 1.45.0 1.45.0

Open the chart page →

8,084

monitoring-stackict-platform

0.4.0

3 of 13 See more

monitoring-stack ict-platform 0.4.0

3 of the 13 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
grafana/loki :3.6.7	3c8fd3570dd9	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.36.0 go.opentelemetry.io/otel/sdk@v1.38.0	1.45.0 1.45.0 1.45.0 1.45.0
ghcr.io/grafana/alloy-operator :1.7.0	2ce23f948e02	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0 go.opentelemetry.io/otel/sdk@v1.37.0	1.45.0 1.45.0 1.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0 go.opentelemetry.io/otel/sdk@v1.37.0	1.45.0 1.45.0 1.45.0

Open the chart page →

9,708

ilum-jupyterhubilum

4.3.1

1 of 6 See more

ilum-jupyterhub ilum 4.3.1

1 of the 6 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0 go.opentelemetry.io/otel/sdk@v1.19.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,997

ilum-otel-collectorilum

0.1.0

1 of 1 See more

ilum-otel-collector ilum 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.113.0	5ac3e0ba2b0b	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.31.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.31.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.31.0 go.opentelemetry.io/otel/sdk@v1.31.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

1,525

infisical-pki-issuerinfisical-charts

1.0.0

1 of 1 See more

infisical-pki-issuer infisical-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
infisical/pki-issuer :latest	ff38294270e3	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0 go.opentelemetry.io/otel/sdk@v1.39.0	1.45.0 1.45.0 1.45.0

Open the chart page →

580

telegraf-dsinfluxdata

1.1.55

1 of 1 See more

telegraf-ds influxdata 1.1.55

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
library/telegraf :1.40-alpine	e2f55b0afaa3	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0

Open the chart page →

272

influxdbinfluxdb2

0.1.0

1 of 1 See more

influxdb influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
library/influxdb :latest	f75e48af0598	go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0

Open the chart page →

2,389

multimodal-data-visualizationintel

3.0.0

1 of 2 See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
intel/multimodal-data-visualization :3.0	3426deb77337	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.6.3 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.6.3 go.opentelemetry.io/otel/sdk@v1.6.3	1.45.0 1.45.0 1.45.0

Open the chart page →

81,916

server-monitoringiserversupport-helm--charts

1.0.0

1 of 2 See more

server-monitoring iserversupport-helm--charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.8.0	d936808bdea5	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0 go.opentelemetry.io/otel/sdk@v1.38.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

1,331

hetzner-dyndnsitsmethemojo

1.4.0

1 of 1 See more

hetzner-dyndns itsmethemojo 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
hashicorp/terraform :1.9.7	b77efab1a448	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.19.0 go.opentelemetry.io/otel/sdk@v1.24.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

1,854

thehiveittrident-oss

0.1.0

1 of 6 See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	go.opentelemetry.io/otel/sdk@v1.35.0	1.45.0

Open the chart page →

6,343

jaasjaas

2026.6.15+101354

1 of 1 See more

jaas jaas 2026.6.15+101354

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/metio/jaas :2026.6.15	e28772028e56	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

360

opencloudjacobcolvin

0.2.3

2 of 13 See more

opencloud jacobcolvin 0.2.3

2 of the 13 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	go.opentelemetry.io/otel/sdk@v1.35.0	1.45.0
opencloudeu/opencloud-rolling :2.1.0	f9634bb04905	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.35.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.35.0 go.opentelemetry.io/otel/sdk@v1.35.0	1.45.0 1.45.0 1.45.0

Open the chart page →

46,016

koptimizejaconi

0.5.4

1 of 2 See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/jaconi-io/koptimize :1.2.5	aca1bbd609b6	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0

Open the chart page →

5,739

newtjeffresc

0.2.1

1 of 1 See more

newt jeffresc 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
fosrl/newt :1.10.4	ccd2b0e9a049	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.41.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.41.0 go.opentelemetry.io/otel/sdk@v1.41.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,113

athens-proxyjenkins-x

0.2.2

1 of 2 See more

athens-proxy jenkins-x 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :latest	ab6f1a1f0fb4	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0 go.opentelemetry.io/otel/sdk@v1.38.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,353

jx-app-datadogjenkins-x

0.0.10

1 of 2 See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
datadog/agent :6	aad9994de6a7	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.23.1 go.opentelemetry.io/otel/sdk@v1.23.1	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

4,105

vaultjfrog

0.25.0

1 of 2 See more

vault jfrog 0.25.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.14.0	b2177a8bfe85	go.opentelemetry.io/otel/sdk@v1.14.0	1.45.0

Open the chart page →

3,981

corednsjouve

1.45.0

1 of 1 See more

coredns jouve 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
coredns/coredns :1.13.1	9b9128672209	go.opentelemetry.io/otel/sdk@v1.37.0	1.45.0

Open the chart page →

923

distributionjouve

0.2.3

1 of 1 See more

distribution jouve 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
distribution/distribution :3.1.1	bca24727f400	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

861

daily-restartjuniorjpdj

0.1.71

1 of 1 See more

daily-restart juniorjpdj 0.1.71

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/juniorjpdj/containers/openssl-kubectl :1.36.1-r4	7d576be7f838	go.opentelemetry.io/otel/sdk@v1.39.0	1.45.0

Open the chart page →

467

mumbledjjuniorjpdj

0.1.201

1 of 2 See more

mumbledj juniorjpdj 0.1.201

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/juniorjpdj/containers/openssl-kubectl :1.36.1-r4	7d576be7f838	go.opentelemetry.io/otel/sdk@v1.39.0	1.45.0

Open the chart page →

957

nginx-gateway-fabricjupyter-jsc

2.4.1

1 of 1 See more

nginx-gateway-fabric jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/nginx/nginx-gateway-fabric :2.4.1	80f3a0a51af5	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.39.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.39.0 go.opentelemetry.io/otel/sdk@v1.39.0	1.45.0 1.45.0 1.45.0

Open the chart page →

373

k8s-aibomk8s-aibom

1.4.0

1 of 1 See more

k8s-aibom k8s-aibom 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/googlecloudplatform/k8s-aibomdigest-pinned	05e86c39c535	go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0

Open the chart page →

deploydefenderk8s-custom-controller

0.1.3

1 of 1 See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/manzil-infinity180/deploydefender :ea3ab0bb646cdbeddd1aca483ecf650f9ac0d084	7fbc6855c8b3	go.opentelemetry.io/otel/sdk@v1.28.0	1.45.0

Open the chart page →

1,905

thanosk8sonlab

1.1.7

1 of 1 See more

thanos k8sonlab 1.1.7

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
thanosio/thanos :v0.41.0	cf3e9b292e43	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0 go.opentelemetry.io/otel/sdk@v1.38.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

602

kagentkagent

0.10.1

4 of 6 See more

kagent kagent 0.10.1

4 of the 6 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
mcp/grafana :latest	9362bcf6aa0e	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.42.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0
ghcr.io/kagent-dev/kagent/controller :0.10.1	878a55478c17	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0 1.45.0
ghcr.io/kagent-dev/kagent/tools :0.2.1	50b431281d3e	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.40.0 go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0 1.45.0 1.45.0 1.45.0
ghcr.io/kagent-dev/kmcp/controller :0.3.0	86ab878da25a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0 go.opentelemetry.io/otel/sdk@v1.28.0	1.45.0 1.45.0 1.45.0

Open the chart page →

3,095

workspacekaito

0.12.0

2 of 7 See more

workspace kaito 0.12.0

2 of the 7 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/acstor/local-csi-driver :v0.3.0	f9af53a79fd1	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0
mcr.microsoft.com/acstor/local-csi-manager :v0.3.0	4f464b52ba85	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

2,539

dockerdkarljorgensen

0.1.0

1 of 1 See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
library/docker :28.5.2-dind	2a232a42256f	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.35.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.35.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.35.0 go.opentelemetry.io/otel/sdk@v1.35.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

2,055

k10restorekasten

8.0.14

1 of 1 See more

k10restore kasten 8.0.14

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
gcr.io/kasten-images/restorectl :8.0.14	5a0884f9a90c	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0 go.opentelemetry.io/otel/sdk@v1.38.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,508

kbot-self-hostedkbot-self-hosted

0.1.8

1 of 7 See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.30	206a6c708fc6	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.42.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.42.0 go.opentelemetry.io/otel/sdk@v1.42.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

33,242

kcmkcm

1.12.0

4 of 12 See more

kcm kcm 1.12.0

4 of the 12 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.2	37396519f399	go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0
ghcr.io/fluxcd/source-controller :v1.9.2	2b8d06650a1b	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0
quay.io/jetstack/cert-manager-controller :v1.21.2	70f532fd9cfd	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0
quay.io/jetstack/cert-manager-webhook :v1.21.2	a60e2dac46db	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

3,330

kcp-operatorkcp-dev

0.7.10

1 of 1 See more

kcp-operator kcp-dev 0.7.10

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/kcp-dev/kcp-operator :v0.9.0	cd8bf46d98e0	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

141

qdrant-operatorkeiailab

0.10.1

1 of 1 See more

qdrant-operator keiailab 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/keiailab/qdrant-operator :v0.10.1	360ec1df72b5	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

kestra-starterkestra

2.0.2

1 of 5 See more

kestra-starter kestra 2.0.2

1 of the 5 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
library/docker :dind-rootless	c876e00a0d81	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

5,633

mysqldumpkfirfer

2.8.0

1 of 1 See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
kfirfer/gcloud-mysql :1.0.3	c257c1e0e8b9	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.14.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.14.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.14.0 go.opentelemetry.io/otel/sdk@v1.14.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

3,525

kiaekiae

0.1.6

1 of 9 See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.63.1	dfb3a55ea8c9	go.opentelemetry.io/otel/sdk@v1.11.1	1.45.0

Open the chart page →

19,288

cdashkitware

0.19.0

1 of 3 See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.12.18-debian-12-r0	cce234b4381a	go.opentelemetry.io/otel/sdk@v1.32.0	1.45.0

Open the chart page →

12,478

rabbitmq-cluster-operatorklicktipp

0.4.2

2 of 3 See more

rabbitmq-cluster-operator klicktipp 0.4.2

2 of the 3 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/rabbitmq/cluster-operator :2.20.1	a96853470256	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0
ghcr.io/rabbitmq/messaging-topology-operator :1.19.1	24c4649ef3ef	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

826

rabbitmq-topology-operatorklicktipp

0.4.1

1 of 2 See more

rabbitmq-topology-operator klicktipp 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/rabbitmq/messaging-topology-operator :1.19.1	24c4649ef3ef	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

557

kollectkollect

0.20.0

1 of 1 See more

kollect kollect 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/platformrelay/kollect :v0.20.0	c95fa31ead03	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,976

cert-managerkomailo-helm-charts

1.10.1

2 of 4 See more

cert-manager komailo-helm-charts 1.10.1

2 of the 4 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.21.2	70f532fd9cfd	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0
quay.io/jetstack/cert-manager-webhook :v1.21.2	a60e2dac46db	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

cloudflare-tunnel-remotekomailo-helm-charts

1.3.1

1 of 1 See more

cloudflare-tunnel-remote komailo-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.9.1	b269e8abd07a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0

Open the chart page →

356

external-secretskomailo-helm-charts

6.1.0

1 of 1 See more

external-secrets komailo-helm-charts 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.10.0	814117b0fd6d	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0	1.45.0 1.45.0

Open the chart page →

k8s-metrics-serverkomailo-helm-charts

1.2.0

1 of 1 See more

k8s-metrics-server komailo-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.9.0	d9862115e7c7	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

171

metallbkomailo-helm-charts

1.2.4

3 of 4 See more

metallb komailo-helm-charts 1.2.4

3 of the 4 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.16.1	f51ab515de9c	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.35.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.35.0 go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0 1.45.0 1.45.0
quay.io/metallb/frr-k8s :v0.0.25	1cb06fb2d553	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0 go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0 1.45.0 1.45.0
quay.io/metallb/speaker :v0.16.1	16561e96531e	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.35.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.35.0 go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0 1.45.0 1.45.0

Open the chart page →

2,176

traefikkomailo-helm-charts

5.1.0

1 of 1 See more

traefik komailo-helm-charts 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
library/traefik :v3.7.13	f86a2cab1b5c	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

171

Container images carrying it

1,423 by charts deploying them

A fixed version is listed for 6 of the 6 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/agent-sandbox/agent-sandbox-controller :v0.5.4	be477ba317d8	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.33.0	6ef10d108e0e	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0 go.opentelemetry.io/otel/sdk@v1.33.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.34.0	7b172f42533c	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.34.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/capi-operator/cluster-api-operator :v0.29.0	465e72f8b06a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.15.1 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.15.1 go.opentelemetry.io/otel/sdk@v1.15.1	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0 go.opentelemetry.io/otel/sdk@v1.28.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/coredns/coredns :v1.13.2	94caebb89dcf	go.opentelemetry.io/otel/sdk@v1.38.0	1.45.0	1
registry.k8s.io/csi-secrets-store/driver :v1.6.1	b48d7d13dd06	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0	1
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	go.opentelemetry.io/otel/sdk@v1.37.0	1.45.0	1
registry.k8s.io/etcd :3.6.4-0	e36c08168342	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0 go.opentelemetry.io/otel/sdk@v1.20.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0 go.opentelemetry.io/otel/sdk@v1.19.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kwok/kwok :v0.8.0	6d25aa8fbdfe	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0 go.opentelemetry.io/otel/sdk@v1.21.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0 go.opentelemetry.io/otel/sdk@v1.21.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.20.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0 go.opentelemetry.io/otel/sdk@v1.20.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.11.1	e6a43c83ab16	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/provider-os/openstack-cloud-controller-manager :v1.36.0	e354e40db2d0	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/sig-storage/csi-attacher :v4.10.0	be59d0556508	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.34.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.34.0	1.45.0 1.45.0 1.45.0	1