StackRadar

CVE-2026-81870

Low

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,355
of 17,821 indexed, latest versions
Container images
1,401
deployed by those charts
Fix available
5 of 5
affected packages

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Carried by container images the latest versions of 1,355 of 17,821 indexed charts deploy, on 1,401 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.6.3, v1.7.0, v1.8.0, v1.9.0+40 more1.45.01,379
go.opentelemetry.io/otel/exporters/otlp/otlptracegolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more1.45.01,096
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcgolangv1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more1.45.01,011
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpgolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more1.45.0426
go.opentelemetry.io/otel/exporters/zipkingolangv1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more1.45.037
OSV records
GHSA-8wmf-6v46-5gfg
Trending
Rank 3 in indexed charts, since 18 Sept 2026. See the ranking →

Charts affected

1,355 by stars
ChartLatestAffected imagesRadar Score
secretssecrets-proxy1.0.61 of 1See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
udhos/secrets:1.0.6daa2b4eaac09
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.35.0
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,150
trivysecurecodebox-trivy5.9.01 of 1See more

trivy securecodebox-trivy 5.9.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
aquasec/trivy:0.74.062b1e65e8869
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

447
semaphoresemaphore-light1.0.01 of 1See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
semaphoreui/semaphore:latest3996804607eb
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.19.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,869
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
bitnami/mongodb-exporter:latestf7034c13af4e
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0

Open the chart page →

7,599
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

7,748
bffshortlink0.2.11 of 1See more

bff shortlink 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.39.0
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,699
linkshortlink0.7.31 of 1See more

link shortlink 0.7.3

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.39.0
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,683
ctlog-tilessigstoreVerified publisher0.1.71 of 1See more

ctlog-tiles sigstore 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/transparency-dev/tesseract/posix:v0.1.2b044edd23888
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

280
trilliansigstoreVerified publisher0.3.202 of 5See more

trillian sigstore 0.3.20

2 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned5a878e4e4f03
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned28c5ff40963f
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

2,758
olmsikalabs0.3.01 of 2See more

olm sikalabs 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinned40d0363f4aa6
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.23.1
go.opentelemetry.io/otel/sdk@v1.23.1
1.45.0
1.45.0
1.45.0

Open the chart page →

1,163
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
go.opentelemetry.io/otel/sdk@v1.36.0
1.45.0

Open the chart page →

2,883
tailscalesinextraVerified publisher0.18.11 of 2See more

tailscale sinextra 0.18.1

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0

Open the chart page →

1,082
teamcitysinextraVerified publisher1.0.21 of 3See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.21.0
go.opentelemetry.io/otel/sdk@v1.21.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

2,449
network-observerskupper-network-observerVerified publisher2.2.21 of 3See more

network-observer skupper-network-observer 2.2.2

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.11.3c0b857aead0d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.42.0
go.opentelemetry.io/otel/sdk@v1.42.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

618
skypilot-prometheus-serverskypilotVerified publisher0.11.11 of 3See more

skypilot-prometheus-server skypilot 0.11.1

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.4.19abc6cf6aea7
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.35.0
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

2,361
slurm-bridgeslurm-bridge1.2.21 of 3See more

slurm-bridge slurm-bridge 1.2.2

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/slinkyproject/slurm-bridge-scheduler:1.2.2d0eec33ab53e
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

87
slurm-operatorslurm-operator1.2.22 of 2See more

slurm-operator slurm-operator 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/slinkyproject/slurm-operator:1.2.20ce1930f20de
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
ghcr.io/slinkyproject/slurm-operator-webhook:1.2.2da98125cd06f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

119
snspingsnsping1.2.91 of 1See more

snsping snsping 1.2.9

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
udhos/snsping:1.2.96ae70677b6a3
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,343
axonhubsnubisks0.1.01 of 3See more

axonhub snubisks 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
looplj/axonhub:latest2c71eeaef295
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

684
tracing-stacksnubisks0.1.05 of 8See more

tracing-stack snubisks 0.1.0

5 of the 8 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.40.0
go.opentelemetry.io/otel/sdk@v1.42.0
1.45.0
1.45.0
1.45.0
1.45.0
grafana/loki:3.6.5847c287ada0e
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.36.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0
1.45.0
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0
1.45.0
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.39.0
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0
1.45.0
1.45.0
1.45.0
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

5,650
cost-analyzersoftonic2.5.53 of 6See more

cost-analyzer softonic 2.5.5

3 of the 6 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0
1.45.0
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
go.opentelemetry.io/otel/sdk@v1.29.0
1.45.0
quay.io/prometheus/prometheus:v3.2.16927e0919a14
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

8,190
harborsoftonic1.13.03 of 8See more

harbor softonic 1.13.0

3 of the 8 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.9.06412d679fdc3
go.opentelemetry.io/otel/sdk@v1.8.0
1.45.0
goharbor/harbor-jobservice:v2.9.039435daedd0c
go.opentelemetry.io/otel/sdk@v1.8.0
1.45.0
goharbor/harbor-registryctl:v2.9.0cce272836449
go.opentelemetry.io/otel/sdk@v1.8.0
1.45.0

Open the chart page →

7,711
kedasoftonic2.17.02 of 3See more

keda softonic 2.17.0

2 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.17.0112fc427d933
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.28.0
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0
1.45.0
1.45.0

Open the chart page →

2,836
kube-prometheus-stacksoftonic81.5.12 of 6See more

kube-prometheus-stack softonic 81.5.1

2 of the 6 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0
1.45.0
1.45.0

Open the chart page →

5,022
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.31.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.31.0
go.opentelemetry.io/otel/sdk@v1.32.0
1.45.0
1.45.0
1.45.0

Open the chart page →

3,313
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
go.opentelemetry.io/otel/sdk@v1.25.0
1.45.0

Open the chart page →

2,427
stackrox-operatorstackroxVerified publisher4.11.41 of 1See more

stackrox-operator stackrox 4.11.4

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/stackrox-io/stackrox-operator:4.11.4dfb3f2ce9f6b
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

112
retail-store-sample-catalog-chartstacksimplifyVerified publisher2.0.01 of 1See more

retail-store-sample-catalog-chart stacksimplify 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-catalog:1.3.0b654b266fa32
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0
1.45.0
1.45.0

Open the chart page →

773
my-appstakefish0.1.01 of 3See more

my-app stakefish 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

280
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.25.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.25.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.25.0
go.opentelemetry.io/otel/sdk@v1.25.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

20,487
ipfsstakewise2.2.01 of 2See more

ipfs stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.31.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.31.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.31.0
go.opentelemetry.io/otel/exporters/zipkin@v1.31.0
go.opentelemetry.io/otel/sdk@v1.31.0
1.45.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,262
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
go.opentelemetry.io/otel/sdk@v1.32.0
1.45.0

Open the chart page →

7,067
v3-backendstakewise3.6.01 of 5See more

v3-backend stakewise 3.6.0

1 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.31.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.31.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.31.0
go.opentelemetry.io/otel/exporters/zipkin@v1.31.0
go.opentelemetry.io/otel/sdk@v1.31.0
1.45.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,262
pulsar-resources-operatorstreamnative0.21.21 of 1See more

pulsar-resources-operator streamnative 0.21.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
streamnative/pulsar-resources-operator:v0.21.282434bb2a8ad
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0

Open the chart page →

128
sn-operatorstreamnative0.20.11 of 1See more

sn-operator streamnative 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
streamnative/sn-operator:v0.20.92a7944a55491
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

43
sn-platform-slimstreamnative1.11.442 of 6See more

sn-platform-slim streamnative 1.11.44

2 of the 6 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.14.0
go.opentelemetry.io/otel/sdk@v1.14.0
1.45.0
1.45.0
1.45.0
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.14.0
go.opentelemetry.io/otel/sdk@v1.14.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

66,885
supabase-operatorstrrl-helm2026.7.251 of 1See more

supabase-operator strrl-helm 2026.7.25

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/strrl/supabase-operator:2026.7.2587d083ab8980
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0
1.45.0
1.45.0

Open the chart page →

237
stunner-devstunner1.2.11 of 2See more

stunner-dev stunner 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
l7mp/stunner-auth-server:dev58c775671b00
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

136
stunner-gateway-operator-devstunner1.1.11 of 2See more

stunner-gateway-operator-dev stunner 1.1.1

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
l7mp/stunner-auth-server:dev58c775671b00
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

136
stunner-premiumstunner1.2.12 of 2See more

stunner-premium stunner 1.2.1

2 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
l7mp/stunner-auth-server:1.2.10d2094060b72
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
l7mp/stunner-gateway-operator-premium:1.2.14383766e66c5
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0

Open the chart page →

269
stunner-prometheusstunner0.2.12 of 4See more

stunner-prometheus stunner 0.2.1

2 of the 4 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0

Open the chart page →

3,066
group-challengesubshell-labVerified publisher2.1.01 of 2See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.29.17d12c7c8fc66
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

2,626
supabase-operatorsupabse0.1.31 of 1See more

supabase-operator supabse 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/supabase-community/supabase-operator:v0.1.3253a6dcbf4f0
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.36.0
1.45.0
1.45.0
1.45.0

Open the chart page →

237
superset-operatorsuperset-kubernetes-operatorVerified publisher0.2.01 of 1See more

superset-operator superset-kubernetes-operator 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/apache/superset-kubernetes-operator:0.2.04351831f757f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

111
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0

Open the chart page →

3,535
projectsveltossveltosVerified publisher1.15.06 of 11See more

projectsveltos sveltos 1.15.0

6 of the 11 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
projectsveltos/access-manager:v1.15.01b396a28296e
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
projectsveltos/addon-controller:v1.15.08eb5a2a2a474
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
projectsveltos/event-manager:v1.15.052f1d173c43d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
projectsveltos/healthcheck-manager:v1.15.0499a2593435f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
projectsveltos/shard-controller:v1.15.0872e772ff1a1
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
projectsveltos/sveltoscluster-manager:v1.15.0b032d483935e
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

141
sveltos-dashboardsveltosVerified publisher1.15.11 of 2See more

sveltos-dashboard sveltos 1.15.1

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
projectsveltos/ui-backend:v1.15.033efd0a00a54
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

160
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.14.0
go.opentelemetry.io/otel/sdk@v1.14.0
1.45.0
1.45.0
1.45.0

Open the chart page →

11,020
stash-boxswuuper-githubVerified publisher0.1.11 of 2See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
stashapp/stash-box:latesta534c8afdf39
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0

Open the chart page →

8,313
agentssynapse0.1.303 of 9See more

agents synapse 0.1.30

3 of the 9 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
go.opentelemetry.io/otel/sdk@v1.14.0
1.45.0
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.28.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0
1.45.0
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
go.opentelemetry.io/otel/sdk@v1.14.0
1.45.0

Open the chart page →

7,288

Container images carrying it

1,401 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.