StackRadar

CVE-2026-81870

Low

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,355
of 17,821 indexed, latest versions
Container images
1,401
deployed by those charts
Fix available
5 of 5
affected packages

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Carried by container images the latest versions of 1,355 of 17,821 indexed charts deploy, on 1,401 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.6.3, v1.7.0, v1.8.0, v1.9.0+40 more1.45.01,379
go.opentelemetry.io/otel/exporters/otlp/otlptracegolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more1.45.01,096
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcgolangv1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more1.45.01,011
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpgolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more1.45.0426
go.opentelemetry.io/otel/exporters/zipkingolangv1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more1.45.037
OSV records
GHSA-8wmf-6v46-5gfg
Trending
Rank 3 in indexed charts, since 18 Sept 2026. See the ranking →

Charts affected

1,355 by stars
ChartLatestAffected imagesRadar Score
blockmeta-servicepinaxVerified publisher0.0.31 of 1See more

blockmeta-service pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.23.1
go.opentelemetry.io/otel/exporters/zipkin@v1.23.1
go.opentelemetry.io/otel/sdk@v1.23.1
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,699
firehose-corepinaxVerified publisher0.1.11 of 2See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
go.opentelemetry.io/otel/exporters/zipkin@v1.23.1
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
1.45.0

Open the chart page →

3,562
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
go.opentelemetry.io/otel/exporters/zipkin@v1.23.1
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
1.45.0

Open the chart page →

7,237
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
go.opentelemetry.io/otel/exporters/zipkin@v1.23.1
go.opentelemetry.io/otel/sdk@v1.23.1
1.45.0
1.45.0

Open the chart page →

58,431
substreams-tier-2pinaxVerified publisher0.0.81 of 1See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
go.opentelemetry.io/otel/exporters/zipkin@v1.23.1
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
1.45.0

Open the chart page →

5,001
pipekit-agentpipekit-helmOfficialVerified publisher8.0.11 of 1See more

pipekit-agent pipekit-helm 8.0.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
pipekit13/agent:v8.0.1b969a930b439
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

131
pixie-operator-chartpixie0.1.71 of 3See more

pixie-operator-chart pixie 0.1.7

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinned1b6002156f56
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.20.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0
go.opentelemetry.io/otel/sdk@v1.20.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,915
pixie-operator-helm2-chartpixie0.1.21 of 2See more

pixie-operator-helm2-chart pixie 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinnedf9ea8cef95ac
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.12.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.12.0
go.opentelemetry.io/otel/sdk@v1.12.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,769
planectlplanectlVerified publisher0.7.02 of 10See more

planectl planectl 0.7.0

2 of the 10 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
pulumi/pulumi-kubernetes-operator:v2.5.17dace4491358
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.40.0
1.45.0
1.45.0
1.45.0
quay.io/argoproj/argocd:v2.14.115fc69e31c755
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.32.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.32.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0

Open the chart page →

26,483
account-operatorplatform-mesh-account-operator0.20.01 of 1See more

account-operator platform-mesh-account-operator 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/platform-mesh/platform-mesh/account-operator:v0.15.5fa4923226063
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
1.45.0
1.45.0

Open the chart page →

19
extension-manager-operatorplatform-mesh-extension-manager-operator0.42.01 of 1See more

extension-manager-operator platform-mesh-extension-manager-operator 0.42.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/platform-mesh/platform-mesh/extension-manager-operator:v0.10.09371fcf05f76
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
1.45.0
1.45.0

Open the chart page →

19
kubernetes-graphql-gatewayplatform-mesh-kubernetes-graphql-gateway0.52.01 of 1See more

kubernetes-graphql-gateway platform-mesh-kubernetes-graphql-gateway 0.52.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/platform-mesh/platform-mesh/kubernetes-graphql-gateway:v1.20.02e6c9c111893
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
1.45.0
1.45.0

Open the chart page →

23
platform-mesh-operatorplatform-mesh-operator0.46.01 of 1See more

platform-mesh-operator platform-mesh-operator 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/platform-mesh/platform-mesh/platform-mesh-operator:v0.89.0b26d85c68aa8
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
1.45.0
1.45.0

Open the chart page →

19
security-operatorplatform-mesh-security-operator0.37.01 of 1See more

security-operator platform-mesh-security-operator 0.37.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/platform-mesh/platform-mesh/security-operator:v0.36.09b26032812fd
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
1.45.0
1.45.0

Open the chart page →

23
virtual-workspacesplatform-mesh-virtual-workspaces0.13.01 of 1See more

virtual-workspaces platform-mesh-virtual-workspaces 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/platform-mesh/platform-mesh/virtual-workspaces:v0.17.0bb2ee6241719
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
1.45.0
1.45.0

Open the chart page →

35
agentpolyaxon2.17.01 of 4See more

agent polyaxon 2.17.0

1 of the 4 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
polyaxon/polyaxon-operator:2.17.07664c1cebb9d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0

Open the chart page →

9,049
polyaxonpolyaxon2.17.01 of 5See more

polyaxon polyaxon 2.17.0

1 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
polyaxon/polyaxon-operator:2.17.07664c1cebb9d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0

Open the chart page →

12,842
portagerportager0.5.01 of 1See more

portager portager 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/jarodr47/portager:0.5.06a7a61b37568
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

151
beylaportefaix-hub0.1.01 of 1See more

beyla portefaix-hub 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/beyla:1.3.336d07f8d276e
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.23.1
go.opentelemetry.io/otel/sdk@v1.23.1
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

2,737
cloudflare-tunnelportefaix-hub0.4.01 of 1See more

cloudflare-tunnel portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.8.314d9c6b01b29
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.26.0
go.opentelemetry.io/otel/sdk@v1.26.0
1.45.0
1.45.0

Open the chart page →

1,345
prometheus-api-bridgeprometheus-api-bridgeVerified publisher0.3.01 of 1See more

prometheus-api-bridge prometheus-api-bridge 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/simonepri/prometheus-api-bridge:0.3.0b34c8f218cea
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

30
pulumi-exporterpulumi-exporter0.1.61 of 1See more

pulumi-exporter pulumi-exporter 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/pulumi-labs/pulumi-exporter:0.1.45415d5a46e7d
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

134
loki-stackpyalive-cdmswebappVerified publisher2.6.52 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

2 of the 4 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
quay.io/prometheus/prometheus:latest5ce7540c3c00
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

6,439
qualys-scannerqualys-helm-chartVerified publisher2.1.01 of 1See more

qualys-scanner qualys-helm-chart 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
qualys/qscanner:5.1.0-59ff255352422
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0

Open the chart page →

259
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/loki:3.3.28af2de1abbdd
go.opentelemetry.io/otel/sdk@v1.29.0
1.45.0

Open the chart page →

4,548
apisixquench-apisixVerified publisher0.0.41 of 2See more

apisix quench-apisix 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/etcddigest-pinned05765ee83074
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

100
coolifyquench-coolifyVerified publisher0.0.201 of 4See more

coolify quench-coolify 0.0.20

1 of the 4 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/coolify-realtimedigest-pinnedf128e512c9c0
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0

Open the chart page →

491
coolify-realtimequench-coolify-realtimeVerified publisher0.0.71 of 1See more

coolify-realtime quench-coolify-realtime 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/coolify-realtimedigest-pinnedf128e512c9c0
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0

Open the chart page →

344
grafanaquench-grafanaVerified publisher0.0.121 of 1See more

grafana quench-grafana 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

177
harbor-observabilityquench-harbor-observabilityVerified publisher0.0.102 of 2See more

harbor-observability quench-harbor-observability 0.0.10

2 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
ghcr.io/quenchworks/images/prometheusdigest-pinnede9037c190bc1
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

281
lgtm-stackquench-lgtm-stackVerified publisher0.0.214 of 9See more

lgtm-stack quench-lgtm-stack 0.0.21

4 of the 9 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/alertmanagerdigest-pinned1b1fc497f871
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
ghcr.io/quenchworks/images/kube-state-metricsdigest-pinnedd2ca5825c609
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
ghcr.io/quenchworks/images/tempodigest-pinned9e889ec33f96
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

518
logging-stackquench-logging-stackVerified publisher0.0.131 of 3See more

logging-stack quench-logging-stack 0.0.13

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

251
observability-stackquench-observability-stackVerified publisher0.0.164 of 5See more

observability-stack quench-observability-stack 0.0.16

4 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/alertmanagerdigest-pinned1b1fc497f871
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
ghcr.io/quenchworks/images/kube-state-metricsdigest-pinnedd2ca5825c609
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
ghcr.io/quenchworks/images/prometheusdigest-pinnede9037c190bc1
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

339
tracing-stackquench-tracing-stackVerified publisher0.0.92 of 3See more

tracing-stack quench-tracing-stack 0.0.9

2 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
ghcr.io/quenchworks/images/tempodigest-pinned9e889ec33f96
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

537
traefikquench-traefikVerified publisher0.0.191 of 1See more

traefik quench-traefik 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/traefikdigest-pinned16e68b966ff9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

47
weaviatequench-weaviateVerified publisher0.0.191 of 1See more

weaviate quench-weaviate 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/weaviatedigest-pinnedea0b54479ff1
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

25
rad-pluginsradOfficialVerified publisher2.4.141 of 5See more

rad-plugins rad 2.4.14

1 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.701afcfbc000e0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

65
headlampradar-baseVerified publisher1.0.01 of 1See more

headlamp radar-base 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.43.05d03caa26df7
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

657
hydraradar-baseVerified publisher0.48.01 of 1See more

hydra radar-base 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.21.0
go.opentelemetry.io/otel/exporters/zipkin@v1.21.0
go.opentelemetry.io/otel/sdk@v1.21.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,542
kratosradar-baseVerified publisher0.43.11 of 1See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
oryd/kratos:v1.1.08f15006a080d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.21.0
go.opentelemetry.io/otel/exporters/zipkin@v1.21.0
go.opentelemetry.io/otel/sdk@v1.21.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,793
kubecostradar-baseVerified publisher1.0.03 of 7See more

kubecost radar-base 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.29.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.29.0
go.opentelemetry.io/otel/sdk@v1.29.0
1.45.0
1.45.0
1.45.0
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
quay.io/prometheus/prometheus:v3.2.05888c188cf09
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

9,636
nginx-gateway-fabricradar-baseVerified publisher2.6.61 of 1See more

nginx-gateway-fabric radar-base 2.6.6

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/nginx/nginx-gateway-fabric:2.6.6c10f734589e9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

132
nifikopradar-baseVerified publisher1.14.11 of 1See more

nifikop radar-base 1.14.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/konpyutaika/docker-images/nifikop:v1.14.1-release6bb00c592a82
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0

Open the chart page →

512
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,839
radar-hydraradar-baseVerified publisher0.3.41 of 2See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
oryd/hydra:v2.3.0b94007e19a1f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.32.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.32.0
go.opentelemetry.io/otel/exporters/zipkin@v1.32.0
go.opentelemetry.io/otel/sdk@v1.32.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

2,198
radar-kratosradar-baseVerified publisher0.1.51 of 1See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
oryd/kratos:v1.3.1fe2428f103a6
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.21.0
go.opentelemetry.io/otel/exporters/zipkin@v1.21.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,579
radar-nifiradar-baseVerified publisher3.1.01 of 1See more

radar-nifi radar-base 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/konpyutaika/docker-images/nifikop:v1.14.1-release6bb00c592a82
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0

Open the chart page →

512
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.42.0
go.opentelemetry.io/otel/sdk@v1.42.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,954
rawfile-localpvrawfile0.15.34 of 6See more

rawfile-localpv rawfile 0.15.3

4 of the 6 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.40.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

2,832
thanosrayselfs-chartsVerified publisher0.1.51 of 1See more

thanos rayselfs-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.36.0
go.opentelemetry.io/otel/sdk@v1.36.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

767

Container images carrying it

1,401 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.