StackRadar

CVE-2026-81870

Low

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,355
of 17,828 indexed, latest versions
Container images
1,405
deployed by those charts
Fix available
5 of 5
affected packages

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Carried by container images the latest versions of 1,355 of 17,828 indexed charts deploy, on 1,405 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.6.3, v1.7.0, v1.8.0, v1.9.0+40 more1.45.01,378
go.opentelemetry.io/otel/exporters/otlp/otlptracegolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more1.45.01,098
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcgolangv1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more1.45.01,012
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpgolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more1.45.0427
go.opentelemetry.io/otel/exporters/zipkingolangv1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more1.45.038
OSV records
GHSA-8wmf-6v46-5gfg
Trending
Rank 5 in indexed charts, since 18 Sept 2026. See the ranking →

Charts affected

1,355 by stars
ChartLatestAffected imagesRadar Score
velkirvelkir0.1.21 of 1See more

velkir velkir 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/ioxie/velkir/manager:v0.1.202c657d62d1d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

138
verticadb-operatorvertica-chartsVerified publisher26.2.21 of 1See more

verticadb-operator vertica-charts 26.2.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
opentext/verticadb-operator:26.2.2-04ad44e44476c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

82
corednsvks-helm-chartsVerified publisher1.45.01 of 1See more

coredns vks-helm-charts 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0

Open the chart page →

923
voidllmvoidllmVerified publisher0.0.251 of 1See more

voidllm voidllm 0.0.25

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/voidmind-io/voidllm:0.0.250df11dd20c28
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

291
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.37.0
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0
1.45.0
1.45.0

Open the chart page →

4,107
consulwarjiang1.3.01 of 2See more

consul warjiang 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
hashicorp/consul:1.17.0712fe02d2f84
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0

Open the chart page →

4,102
valkey-operatorwellcakeVerified publisher0.8.11 of 1See more

valkey-operator wellcake 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/melancholictheory/wellcake:0.8.12fd2678f07ef
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.36.0
1.45.0
1.45.0
1.45.0

Open the chart page →

124
alertmanagerwener2.0.01 of 2See more

alertmanager wener 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

56
apisixwener2.17.01 of 3See more

apisix wener 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0

Open the chart page →

3,200
apisix-ingress-controllerwener1.4.01 of 2See more

apisix-ingress-controller wener 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,705
argo-cdwener10.9.22 of 3See more

argo-cd wener 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

3,085
argocd-image-updaterwener1.3.11 of 1See more

argocd-image-updater wener 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

733
argo-eventswener2.4.271 of 1See more

argo-events wener 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
go.opentelemetry.io/otel/sdk@v1.36.0
1.45.0

Open the chart page →

1,093
athens-proxywener0.5.21 of 2See more

athens-proxy wener 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0

Open the chart page →

5,009
cert-managerwener1.21.22 of 4See more

cert-manager wener 1.21.2

2 of the 4 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.21.270f532fd9cfd
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
quay.io/jetstack/cert-manager-webhook:v1.21.2a60e2dac46db
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

30
daprwener1.18.45 of 5See more

dapr wener 1.18.4

5 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/dapr/injector:1.18.45ac0db7ca106
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
ghcr.io/dapr/operator:1.18.4af58fae3e7c9
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
ghcr.io/dapr/placement:1.18.490d2293f42a3
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
ghcr.io/dapr/scheduler:1.18.4239eac864320
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
ghcr.io/dapr/sentry:1.18.405286fc952e7
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

225
external-secretswener2.11.01 of 1See more

external-secrets wener 2.11.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.11.066fb710878cb
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
1.45.0
1.45.0

Open the chart page →

51
juicefs-csi-driverwener0.33.01 of 5See more

juicefs-csi-driver wener 0.33.0

1 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0

Open the chart page →

9,085
kube-prometheus-stackwener91.4.13 of 6See more

kube-prometheus-stack wener 91.4.1

3 of the 6 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
quay.io/prometheus-operator/prometheus-operator:v0.94.0cf153f64d6c3
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
1.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

682
kube-state-metricswener8.5.01 of 1See more

kube-state-metrics wener 8.5.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

96
mesherywener1.0.701 of 1See more

meshery wener 1.0.70

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
meshery/meshery:stable-latest44b64ee128fb
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.39.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,500
rancherwener2.15.12 of 2See more

rancher wener 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
rancher/shell:v0.8.1f293af9c635f
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0

Open the chart page →

1,535
vaultwener0.34.11 of 2See more

vault wener 0.34.1

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

552
victoria-metrics-k8s-stackwener0.93.03 of 7See more

victoria-metrics-k8s-stack wener 0.93.0

3 of the 7 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0
victoriametrics/operator:v0.74.17310c4a80b94
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,955
victoria-metrics-operatorwener0.67.31 of 1See more

victoria-metrics-operator wener 0.67.3

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
victoriametrics/operator:v0.74.17310c4a80b94
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

125
alertmanagerwenerme2.0.01 of 2See more

alertmanager wenerme 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

56
apisixwenerme2.17.01 of 3See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0

Open the chart page →

3,200
apisix-ingress-controllerwenerme1.4.01 of 2See more

apisix-ingress-controller wenerme 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,705
argocd-image-updaterwenerme1.3.11 of 1See more

argocd-image-updater wenerme 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

733
argo-eventswenerme2.4.271 of 1See more

argo-events wenerme 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
go.opentelemetry.io/otel/sdk@v1.36.0
1.45.0

Open the chart page →

1,093
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0

Open the chart page →

5,009
cert-managerwenerme1.21.22 of 4See more

cert-manager wenerme 1.21.2

2 of the 4 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.21.270f532fd9cfd
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
quay.io/jetstack/cert-manager-webhook:v1.21.2a60e2dac46db
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

30
external-secretswenerme2.11.01 of 1See more

external-secrets wenerme 2.11.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.11.066fb710878cb
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
1.45.0
1.45.0

Open the chart page →

51
harborwenerme1.19.24 of 8See more

harbor wenerme 1.19.2

4 of the 8 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.15.2d7b780d23721
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
goharbor/harbor-jobservice:v2.15.2f71a4452a095
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,738
juicefs-csi-driverwenerme0.33.01 of 5See more

juicefs-csi-driver wenerme 0.33.0

1 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0

Open the chart page →

9,085
kube-state-metricswenerme8.5.01 of 1See more

kube-state-metrics wenerme 8.5.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

96
mesherywenerme1.0.701 of 1See more

meshery wenerme 1.0.70

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
meshery/meshery:stable-latest44b64ee128fb
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.39.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,500
prometheuswenerme29.31.13 of 6See more

prometheus wenerme 29.31.1

3 of the 6 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

466
rancherwenerme2.15.12 of 2See more

rancher wenerme 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
rancher/shell:v0.8.1f293af9c635f
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0

Open the chart page →

1,535
vaultwenerme0.34.11 of 2See more

vault wenerme 0.34.1

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

552
victoria-metrics-k8s-stackwenerme0.93.03 of 7See more

victoria-metrics-k8s-stack wenerme 0.93.0

3 of the 7 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0
victoriametrics/operator:v0.74.17310c4a80b94
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,955
victoria-metrics-operatorwenerme0.67.31 of 1See more

victoria-metrics-operator wenerme 0.67.3

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
victoriametrics/operator:v0.74.17310c4a80b94
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

125
wexa-studiowexa-studio1.2.03 of 15See more

wexa-studio wexa-studio 1.2.0

3 of the 15 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
go.opentelemetry.io/otel/sdk@v1.14.0
1.45.0
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.11.2
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.35.0
go.opentelemetry.io/otel/sdk@v1.11.2
1.45.0
1.45.0
1.45.0
temporalio/server:1.29.1c1e3326b2ce1
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.11.2
go.opentelemetry.io/otel/sdk@v1.11.2
1.45.0
1.45.0
1.45.0

Open the chart page →

13,047
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0
go.opentelemetry.io/otel/sdk@v1.21.0
1.45.0
1.45.0
1.45.0

Open the chart page →

9,398
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0

Open the chart page →

2,035
orcwiremindVerified publisher0.3.01 of 1See more

orc wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/orc/openstack-resource-controller:v2.5.079f22af49612
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

277
registrywiremindVerified publisher0.1.11 of 1See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.32.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.32.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.32.0
go.opentelemetry.io/otel/sdk@v1.32.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,358
xboardxboard0.2.01 of 1See more

xboard xboard 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/cedar2025/xboard:latest896e4926e0d7
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,061
xonodepoolsxonodepoolsOfficialVerified publisher1.0.71 of 1See more

xonodepools xonodepools 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
xosphere/xonodepools:1.0.71458097b6f85
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.36.0
1.45.0
1.45.0
1.45.0

Open the chart page →

402
fleet-managementxxl-job-adminVerified publisher1.0.01 of 1See more

fleet-management xxl-job-admin 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/dellnoantechnp/alloy-remote-config/fleet-management:master4371b566d238
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.40.0
1.45.0
1.45.0
1.45.0

Open the chart page →

238

Container images carrying it

1,405 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.20.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0
go.opentelemetry.io/otel/sdk@v1.20.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.1e6a43c83ab16
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0
go.opentelemetry.io/otel/sdk@v1.10.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.36.0e354e40db2d0
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.