CVE-2026-81870

Low

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026

Severity: Low; worst across findings
CVSS: 2.0; base score, highest
EPSS: 0.002; 9th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,384; of 17,813 indexed, latest versions
Container images: 1,423; deployed by those charts
Fix available: 6 of 6; affected packages

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Carried by container images the latest versions of 1,384 of 17,813 indexed charts deploy, on 1,423 images.

Affected package	Affected versions	Fixed in	Images
go.opentelemetry.io/otel/sdkgolang	v1.6.3, v1.7.0, v1.8.0, v1.9.0+40 more	1.45.0	1,398
go.opentelemetry.io/otel/exporters/otlp/otlptracegolang	v1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more	1.45.0	1,115
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcgolang	v1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more	1.45.0	1,028
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpgolang	v1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more	1.45.0	439
go.opentelemetry.io/otel/exporters/zipkingolang	v1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more	1.45.0	37
kubernetes-1.36apk	1.36.4-r8	1.36.4-r10	1

OSV records: CGA-2c9g-p4w2-5539 GHSA-8wmf-6v46-5gfg
Also known as: CGA-3wf9-xxx4-3cwx, CGA-6492-hrx3-qqwg, CGA-7fm4-77h5-5xv5, CGA-7r7f-p2pr-7w6x, CGA-94hm-pgxc-g949, CGA-95h5-9cf3-7w6f, CGA-9v46-576g-p8q6, CGA-9w5x-grm4-mwqw, CGA-cmx9-cm4w-g6rc, CGA-cph3-6489-7mr5, CGA-f878-h3vr-ph69, CGA-f9g5-hvh2-cxwg, CGA-fgxv-46pw-wrrg, CGA-fjx9-g624-j5w2, CGA-g9fj-pqfm-pxhj, CGA-gvrh-v65x-4f64, CGA-hvph-q6vw-mp7h, CGA-jvxq-8v73-23wj, CGA-mf36-f5m8-jp98, CGA-mh5g-xj8h-63rj, CGA-p25p-9grf-8c4r, CGA-pgh3-5vjx-6h78, CGA-r2cr-m4m5-296p, CGA-rc9c-wr95-6pw5, CGA-wmp5-5fch-33v9, CGA-wwqw-q86j-r6j6, CGA-xgxm-29f7-q4c3, CGA-xv44-f9jp-whfv, CGA-xxjh-jh7q-vwjq
Trending: Rank 2 in indexed charts, since 18 Sept 2026. See the ranking →

Charts affected

1,384 by stars

Chart

Latest

Affected images

Radar Score

ksoc-pluginsksoc

1.9.10

1 of 5 See more

ksoc-plugins ksoc 1.9.10

1 of the 5 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-guard :v1.1.17	a94d2d4aae85	go.opentelemetry.io/otel/sdk@v1.28.0	1.45.0

Open the chart page →

3,213

calicokubeblocks

3.28.0

1 of 3 See more

calico kubeblocks 3.28.0

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
calico/kube-controllers :v3.28.0	8f04e4772a2b	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0 go.opentelemetry.io/otel/sdk@v1.21.0	1.45.0 1.45.0 1.45.0

Open the chart page →

3,316

gemini-schedulerkubeblocks

0.1.1

1 of 1 See more

gemini-scheduler kubeblocks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
apecloud/gemini-scheduler :0.1.1	5832d1a9097a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.24.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.24.0 go.opentelemetry.io/otel/sdk@v1.25.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,572

grafanakubeblocks

6.59.4

1 of 1 See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
grafana/grafana :10.1.1	1b9ca4bbc4a2	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.16.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.14.0 go.opentelemetry.io/otel/sdk@v1.16.0	1.45.0 1.45.0 1.45.0

Open the chart page →

3,580

metrics-serverkubeblocks

3.12.0

1 of 1 See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0 go.opentelemetry.io/otel/sdk@v1.21.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,145

prometheuskubeblocks

15.16.1

1 of 6 See more

prometheus kubeblocks 15.16.1

1 of the 6 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.39.1	4748e26f9369	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

10,324

spiderpoolkubeblocks

1.2.0

2 of 4 See more

spiderpool kubeblocks 1.2.0

2 of the 4 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	go.opentelemetry.io/otel/sdk@v1.24.0	1.45.0
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	go.opentelemetry.io/otel/sdk@v1.24.0	1.45.0

Open the chart page →

8,515

traefikkubeblocks

41.4.0

1 of 1 See more

traefik kubeblocks 41.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
library/traefik :v3.7.12	9c2a54d87f76	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

267

vaultkubeblocks

0.30.0

1 of 2 See more

vault kubeblocks 0.30.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.19.0	bbb7f98dc67d	go.opentelemetry.io/otel/sdk@v1.34.0	1.45.0

Open the chart page →

3,044

kube-botblocker-operatorkube-botblocker

0.2.2

1 of 2 See more

kube-botblocker-operator kube-botblocker 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/gustavojst/kube-botblocker :0.2.0	4de059bb32ac	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0 go.opentelemetry.io/otel/sdk@v1.28.0	1.45.0 1.45.0 1.45.0

Open the chart page →

507

kubecachekubecache

0.14.1

1 of 1 See more

kubecache kubecache 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
udhos/kubecache :0.14.1	f44ef986df49	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

404

kubedns-shepherdkubedns-shepherd

0.4.4

1 of 1 See more

kubedns-shepherd kubedns-shepherd 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/eminaktas/kubedns-shepherd :v0.4.4	0a20e1b41740	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

airflow-operatorkubedoop

0.4.0

1 of 1 See more

airflow-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/airflow-operator :0.4.0	b716ef483b75	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.36.0	1.45.0 1.45.0 1.45.0

Open the chart page →

438

commons-operatorkubedoop

0.4.0

1 of 1 See more

commons-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/commons-operator :0.4.0	1a353def9fe1	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

388

dolphinscheduler-operatorkubedoop

0.4.0

1 of 1 See more

dolphinscheduler-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/dolphinscheduler-operator :0.4.0	d0a4e55eeb7f	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

381

hbase-operatorkubedoop

0.4.0

1 of 1 See more

hbase-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/hbase-operator :0.4.0	69e9a1b0daf8	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

388

hdfs-operatorkubedoop

0.4.0

1 of 1 See more

hdfs-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/hdfs-operator :0.4.0	eb3c2928250e	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.36.0	1.45.0 1.45.0 1.45.0

Open the chart page →

438

hive-operatorkubedoop

0.4.0

1 of 1 See more

hive-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/hive-operator :0.4.0	d66ba9149c22	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

381

kafka-operatorkubedoop

0.4.0

1 of 1 See more

kafka-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/kafka-operator :0.4.0	0a0b4c39c1ba	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

464

listener-operatorkubedoop

0.4.0

2 of 6 See more

listener-operator kubedoop 0.4.0

2 of the 6 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/listener-csi-driver :0.4.0	b69bed123b02	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0
quay.io/zncdatadev/listener-operator :0.4.0	68b92dae8d75	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

4,537

nifi-operatorkubedoop

0.4.0

1 of 1 See more

nifi-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/nifi-operator :0.4.0	bb4e26ff5e2f	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

388

secret-operatorkubedoop

0.4.0

1 of 5 See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/secret-csi-driver :0.4.0	604a7d98ab58	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.38.0	1.45.0 1.45.0 1.45.0

Open the chart page →

4,456

spark-k8s-operatorkubedoop

0.4.0

1 of 1 See more

spark-k8s-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/spark-k8s-operator :0.4.0	d3f2b10c4a6d	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

411

superset-operatorkubedoop

0.4.0

1 of 1 See more

superset-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/superset-operator :0.4.0	102e66e32218	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

388

trino-operatorkubedoop

0.4.0

1 of 1 See more

trino-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/trino-operator :0.4.0	4f516757aee3	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

376

zookeeper-operatorkubedoop

0.4.0

1 of 1 See more

zookeeper-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/zookeeper-operator :0.4.0	b4f33d89ac45	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

388

kubegems-edgekubegems

1.24.10

1 of 1 See more

kubegems-edge kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
kubegems/kubegems :v1.24.10	a730bcf9322a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.17.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.17.0 go.opentelemetry.io/otel/sdk@v1.17.0	1.45.0 1.45.0 1.45.0

Open the chart page →

3,399

prometheus-adapterkubegems

4.14.1

1 of 1 See more

prometheus-adapter kubegems 4.14.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0 go.opentelemetry.io/otel/sdk@v1.21.0	1.45.0 1.45.0 1.45.0

Open the chart page →

945

volcanokubegems

1.12.1

1 of 3 See more

volcano kubegems 1.12.1

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
volcanosh/vc-webhook-manager :v1.12.1	f8b50088a732	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0 go.opentelemetry.io/otel/sdk@v1.28.0	1.45.0 1.45.0 1.45.0

Open the chart page →

5,048

stackit-operatorkubehippie-stackit-operator

1.0.5

1 of 1 See more

stackit-operator kubehippie-stackit-operator 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/kubehippie/stackit-operator :1.0.5	d4eb6a82ebbe	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

kubensynckubensync

0.14.1

1 of 1 See more

kubensync kubensync 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/eryalito/kubensync-operator :0.14.1	483efca276a8	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

kube-oidc-proxykube-oidc-proxy

1.8.1

1 of 1 See more

kube-oidc-proxy kube-oidc-proxy 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/rafpe/kube-oidc-proxy :1.8.1	300f51feb1a7	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

kube-ovnkube-ovn-test

1.14.0

1 of 1 See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
kubeovn/kube-ovn :v1.14.0	6722b54eb5c0	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.35.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.35.0 go.opentelemetry.io/otel/sdk@v1.35.0	1.45.0 1.45.0 1.45.0

Open the chart page →

5,287

kuberecordkuberecord

0.4.0

1 of 1 See more

kuberecord kuberecord 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/kuberecord/kuberecord :v0.4.0	2a19792ad2ec	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.39.0	1.45.0 1.45.0 1.45.0

Open the chart page →

190

cloudflaredkubernetes-homelab-helm-charts

0.1.1

1 of 1 See more

cloudflared kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.26.0 go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0 1.45.0

Open the chart page →

1,481

pocket-idkubernetes-homelab-helm-charts

0.1.0

1 of 1 See more

pocket-id kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/pocket-id/pocket-id :v2.7.0	45bdeaf3fcd6	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

1,532

uptime-kumakubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.2.1-slim	059b49d64739	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.26.0 go.opentelemetry.io/otel/sdk@v1.35.0	1.45.0 1.45.0

Open the chart page →

6,418

api-serverkubeshop

0.11.16

1 of 2 See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	go.opentelemetry.io/otel/sdk@v1.35.0	1.45.0

Open the chart page →

3,550

testkube-operatorkubeshop

2.1.154

1 of 3 See more

testkube-operator kubeshop 2.1.154

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
kubeshop/testkube-operator :2.1.154	def0d0f0d4ab	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.34.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,019

tracetestkubeshop

0.3.39

1 of 2 See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
kubeshop/tracetest :v1.7.1	73d7e3a2db43	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0 go.opentelemetry.io/otel/sdk@v1.19.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,570

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.13.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.7.0 go.opentelemetry.io/otel/sdk@v1.13.0	1.45.0 1.45.0 1.45.0
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.14.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.14.0 go.opentelemetry.io/otel/sdk@v1.14.0	1.45.0 1.45.0 1.45.0
grafana/grafana :9.5.2	39c849cebccc	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.14.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.14.0 go.opentelemetry.io/otel/sdk@v1.14.0	1.45.0 1.45.0 1.45.0

Open the chart page →

18,500

easegresskubesphere-stable

1.0.0

1 of 1 See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
megaease/easegress :latest	fad1c7452958	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.20.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.19.0 go.opentelemetry.io/otel/exporters/zipkin@v1.19.0 go.opentelemetry.io/otel/sdk@v1.37.0	1.45.0 1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

1,329

minio-gatewaykubesphere-test

0.1.0

1 of 1 See more

minio-gateway kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	go.opentelemetry.io/otel/sdk@v1.35.0	1.45.0

Open the chart page →

1,201

kubestellar-consolekubestellar-console

0.3.41

2 of 2 See more

kubestellar-console kubestellar-console 0.3.41

2 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	go.opentelemetry.io/otel/sdk@v1.29.0	1.45.0
ghcr.io/kubestellar/console :v0.3.41	457cfc94b4da	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

4,618

forkliftkubevirt-forklift

0.3.0

1 of 2 See more

forklift kubevirt-forklift 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/kubev2v/forklift-operator :release-2.12	68657c36c086	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,462

network-enforcerkubewarden

0.1.2

1 of 3 See more

network-enforcer kubewarden 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/kubewarden/network-enforcer/controller :v0.2.0	c8b75e73052a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0	1.45.0 1.45.0

Open the chart page →

2,694

kubiya-runnerkubiya-helm-charts

0.9.4

3 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

3 of the 9 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.31.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.31.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.31.0 go.opentelemetry.io/otel/sdk@v1.31.0	1.45.0 1.45.0 1.45.0 1.45.0
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.32.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.33.0 go.opentelemetry.io/otel/sdk@v1.37.0	1.45.0 1.45.0 1.45.0 1.45.0
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	go.opentelemetry.io/otel/sdk@v1.33.0	1.45.0

Open the chart page →

20,582

krakendkvalitetsit

0.0.3

1 of 1 See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :latest	f8bdaa8a1a43	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.28.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.28.0 go.opentelemetry.io/otel/sdk@v1.28.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

1,519

myra-cert-manager-webhookkvalitetsit

1.2.1

1 of 1 See more

myra-cert-manager-webhook kvalitetsit 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
kvalitetsit/myra-cert-manager-webhook :1.2.1	84ab59a1434e	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

178

lagoon-docker-hostlagoon-charts

0.7.0

1 of 1 See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.35.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.31.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.31.0 go.opentelemetry.io/otel/sdk@v1.31.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

2,281

Container images carrying it

1,423 by charts deploying them

A fixed version is listed for 6 of the 6 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/agent-sandbox/agent-sandbox-controller :v0.5.4	be477ba317d8	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.33.0	6ef10d108e0e	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0 go.opentelemetry.io/otel/sdk@v1.33.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.34.0	7b172f42533c	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.34.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/capi-operator/cluster-api-operator :v0.29.0	465e72f8b06a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.15.1 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.15.1 go.opentelemetry.io/otel/sdk@v1.15.1	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0 go.opentelemetry.io/otel/sdk@v1.28.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/coredns/coredns :v1.13.2	94caebb89dcf	go.opentelemetry.io/otel/sdk@v1.38.0	1.45.0	1
registry.k8s.io/csi-secrets-store/driver :v1.6.1	b48d7d13dd06	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0	1
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	go.opentelemetry.io/otel/sdk@v1.37.0	1.45.0	1
registry.k8s.io/etcd :3.6.4-0	e36c08168342	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0 go.opentelemetry.io/otel/sdk@v1.20.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0 go.opentelemetry.io/otel/sdk@v1.19.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kwok/kwok :v0.8.0	6d25aa8fbdfe	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0 go.opentelemetry.io/otel/sdk@v1.21.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0 go.opentelemetry.io/otel/sdk@v1.21.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.20.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0 go.opentelemetry.io/otel/sdk@v1.20.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.11.1	e6a43c83ab16	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/provider-os/openstack-cloud-controller-manager :v1.36.0	e354e40db2d0	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/sig-storage/csi-attacher :v4.10.0	be59d0556508	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.34.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.34.0	1.45.0 1.45.0 1.45.0	1