StackRadar

CVE-2026-81870

Low

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,384
of 17,813 indexed, latest versions
Container images
1,423
deployed by those charts
Fix available
6 of 6
affected packages

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Carried by container images the latest versions of 1,384 of 17,813 indexed charts deploy, on 1,423 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.6.3, v1.7.0, v1.8.0, v1.9.0+40 more1.45.01,398
go.opentelemetry.io/otel/exporters/otlp/otlptracegolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more1.45.01,115
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcgolangv1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more1.45.01,028
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpgolangv1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more1.45.0439
go.opentelemetry.io/otel/exporters/zipkingolangv1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more1.45.037
kubernetes-1.36apk1.36.4-r81.36.4-r101
OSV records
CGA-2c9g-p4w2-5539GHSA-8wmf-6v46-5gfg
Also known as
CGA-3wf9-xxx4-3cwx, CGA-6492-hrx3-qqwg, CGA-7fm4-77h5-5xv5, CGA-7r7f-p2pr-7w6x, CGA-94hm-pgxc-g949, CGA-95h5-9cf3-7w6f, CGA-9v46-576g-p8q6, CGA-9w5x-grm4-mwqw, CGA-cmx9-cm4w-g6rc, CGA-cph3-6489-7mr5, CGA-f878-h3vr-ph69, CGA-f9g5-hvh2-cxwg, CGA-fgxv-46pw-wrrg, CGA-fjx9-g624-j5w2, CGA-g9fj-pqfm-pxhj, CGA-gvrh-v65x-4f64, CGA-hvph-q6vw-mp7h, CGA-jvxq-8v73-23wj, CGA-mf36-f5m8-jp98, CGA-mh5g-xj8h-63rj, CGA-p25p-9grf-8c4r, CGA-pgh3-5vjx-6h78, CGA-r2cr-m4m5-296p, CGA-rc9c-wr95-6pw5, CGA-wmp5-5fch-33v9, CGA-wwqw-q86j-r6j6, CGA-xgxm-29f7-q4c3, CGA-xv44-f9jp-whfv, CGA-xxjh-jh7q-vwjq
Trending
Rank 2 in indexed charts, since 18 Sept 2026. See the ranking →

Charts affected

1,384 by stars
ChartLatestAffected imagesRadar Score
imgproxyimgproxy1.1.01 of 1See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

2,406
cloudflaredkubitodevVerified publisher1.7.91 of 1See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.26.0
go.opentelemetry.io/otel/sdk@v1.40.0
1.45.0
1.45.0

Open the chart page →

1,481
zotzot0.1.1251 of 1See more

zot zot 0.1.125

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/project-zot/zot:v2.1.216b69512c00dc
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

374
aws-ebs-csi-driveraws-ebs-csi-driver2.66.03 of 6See more

aws-ebs-csi-driver aws-ebs-csi-driver 2.66.0

3 of the 6 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
public.ecr.aws/csi-components/csi-attacher:v4.12.0-eksbuild.8f12da9edb687
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
1.45.0
1.45.0
public.ecr.aws/csi-components/csi-provisioner:v6.3.0-eksbuild.7344672a6d3a7
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
public.ecr.aws/csi-components/csi-resizer:v2.2.1-eksbuild.63e9480a608a1
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
1.45.0
1.45.0

Open the chart page →

29
netbirdjaconiVerified publisher0.15.13 of 4See more

netbird jaconi 0.15.1

3 of the 4 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
netbirdio/management:0.45.10c9994b393ea
go.opentelemetry.io/otel/sdk@v1.26.0
1.45.0
netbirdio/relay:0.45.1872e3add0e1e
go.opentelemetry.io/otel/sdk@v1.26.0
1.45.0
netbirdio/signal:0.45.146ce5a45538f
go.opentelemetry.io/otel/sdk@v1.26.0
1.45.0

Open the chart page →

8,134
k8upk8upVerified publisher4.10.01 of 1See more

k8up k8up 4.10.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/k8up-io/k8up:v2.16.029458113b8b6
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0

Open the chart page →

726
linkerd-jaegerlinkerd2Verified publisher30.12.111 of 4See more

linkerd-jaeger linkerd2 30.12.11

1 of the 4 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.59.0ee9da0b08d83
go.opentelemetry.io/otel/sdk@v1.9.0
1.45.0

Open the chart page →

4,423
argocdnicklasfrahm-argocdVerified publisher0.3.01 of 2See more

argocd nicklasfrahm-argocd 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0
go.opentelemetry.io/otel/sdk@v1.36.0
1.45.0
1.45.0
1.45.0

Open the chart page →

5,494
open-feature-operatoropen-feature-operatorOfficialVerified publisher0.9.31 of 1See more

open-feature-operator open-feature-operator 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/open-feature/open-feature-operator:v0.9.3b37a442c0497
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

142
trivytrivy-operator0.26.01 of 1See more

trivy trivy-operator 0.26.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
aquasec/trivy:0.74.062b1e65e8869
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

447
plugin-barman-cloudcloudnative-pgVerified publisher0.8.01 of 1See more

plugin-barman-cloud cloudnative-pg 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/plugin-barman-cloud:v0.15.0563c680fe7fd
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

84
falcosidekickfalcosecurity0.14.01 of 1See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.32.01976da721518
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.34.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,775
beylagrafana1.16.111 of 1See more

beyla grafana 1.16.11

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/beyla:3.32.03ff0f7cf2bbf
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

140
kube-prometheus-stackkube-prometheus-stack-oci91.4.13 of 6See more

kube-prometheus-stack kube-prometheus-stack-oci 91.4.1

3 of the 6 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0
quay.io/prometheus-operator/prometheus-operator:v0.94.0cf153f64d6c3
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
1.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

682
kubescape-operatorkubescape1.40.45 of 6See more

kubescape-operator kubescape 1.40.4

5 of the 6 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/kubescape/kubescape:v4.0.1358651dce3376
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
1.45.0
1.45.0
1.45.0
quay.io/kubescape/kubevuln:v0.3.4309bed2f723ea0
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
quay.io/kubescape/node-agent:v0.3.2192044ed750f5e
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0
quay.io/kubescape/operator:v0.2.16901b2694425e9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
quay.io/kubescape/storage:v0.0.33101f2b053ace1
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,011
linkerd-vizlinkerd2-edgeVerified publisher30.14.11-edge1 of 5See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.1a67e5e402ff5
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.19.0
go.opentelemetry.io/otel/sdk@v1.19.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,363
plane-cemakeplaneOfficialVerified publisher1.8.11 of 11See more

plane-ce makeplane 1.8.1

1 of the 11 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.45.0

Open the chart page →

5,004
milvusmilvus-helm5.0.282 of 4See more

milvus milvus-helm 5.0.28

2 of the 4 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.25-r1fededb2f2d63
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.20.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.opentelemetry.io/otel/sdk@v1.32.0
1.45.0

Open the chart page →

11,175
opa-kube-mgmtopa-kube-mgmtVerified publisher11.0.122 of 2See more

opa-kube-mgmt opa-kube-mgmt 11.0.12

2 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
openpolicyagent/kube-mgmt:11.0.123a8b1bacbcd8
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
openpolicyagent/opa:1.19.0852359995443
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

622
redis-operatorot-container-kit0.26.11 of 1See more

redis-operator ot-container-kit 0.26.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/opstree/redis-operator:v0.26.01c6818e5e505
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.24.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.24.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

137
spirespiffeVerified publisher0.30.21 of 10See more

spire spiffe 0.30.2

1 of the 10 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spire-server:1.15.34082f30d3e0d
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

1,688
altinity-clickhouse-operatoraltinity-clickhouse-operator0.27.32 of 3See more

altinity-clickhouse-operator altinity-clickhouse-operator 0.27.3

2 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.27.3251c4fda2818
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
altinity/metrics-exporter:0.27.36831ce244b81
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0

Open the chart page →

141
bytebasebytebase1.1.51 of 1See more

bytebase bytebase 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
bytebase/bytebase:latesta6d845773b60
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0
go.opentelemetry.io/otel/exporters/zipkin@v1.36.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

318
ansible-semaphorecloudhippieVerified publisher15.2.111 of 1See more

ansible-semaphore cloudhippie 15.2.11

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
go.opentelemetry.io/otel/sdk@v1.30.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,430
etcdcloudpirates-etcdVerified publisher0.8.81 of 1See more

etcd cloudpirates-etcd 0.8.8

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
gcr.io/etcd-development/etcd:v3.7.1a9983dd6d928
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

143
codefreshcodefresh-onpremOfficialVerified publisher2.12.152 of 42See more

codefresh codefresh-onprem 2.12.15

2 of the 42 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
go.opentelemetry.io/otel/sdk@v1.24.0
1.45.0
quay.io/codefresh/dind:3.0.250885ab519dac
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

15,557
eck-exporterenixVerified publisher1.14.01 of 1See more

eck-exporter enix 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

96
gitlab-operatorgitlabVerified publisher3.4.01 of 1See more

gitlab-operator gitlab 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:3.4.07d6d835ec2c6
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0

Open the chart page →

11
lakefslakefsVerified publisher1.12.311 of 1See more

lakefs lakefs 1.12.31

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
treeverse/lakefs:1.86.0fb7a0d90f77e
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

407
coreneuvectorchartsVerified publisher2.11.22 of 5See more

core neuvectorcharts 2.11.2

2 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
neuvector/controller:5.6.2824e29cf32c5
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
neuvector/enforcer:5.6.272e1deee40fb
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

447
supabasetokens-studioVerified publisher1.0.02 of 14See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.31.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.31.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.31.0
go.opentelemetry.io/otel/sdk@v1.31.0
1.45.0
1.45.0
1.45.0
1.45.0
supabase/gotrue:v2.163.0ba4ddc594b0b
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.19.0
go.opentelemetry.io/otel/sdk@v1.26.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

23,182
csi-secrets-store-provider-azurecsi-secrets-store-provider-azureVerified publisher1.8.22 of 5See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

2 of the 5 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/azure/secrets-store/provider-azure:v1.8.2844922d58d76
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.65f91243cfd60
go.opentelemetry.io/otel/sdk@v1.15.1
1.45.0

Open the chart page →

2,232
jaeger-all-in-onejaeger-all-in-oneVerified publisher0.1.121 of 1See more

jaeger-all-in-one jaeger-all-in-one 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.55f6b5d09073f1
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.24.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.24.0
go.opentelemetry.io/otel/sdk@v1.24.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,230
etcdkubelauncherVerified publisher0.4.31 of 1See more

etcd kubelauncher 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/etcddigest-pinned8ab954711fb9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

847
thanosstevehipwellVerified publisher1.24.11 of 1See more

thanos stevehipwell 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

212
caddyalekcVerified publisher0.9.01 of 1See more

caddy alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
library/caddy:2.11.4-alpinede23def33b17
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

228
openstack-cinder-csicloud-provider-openstack2.36.52 of 7See more

openstack-cinder-csi cloud-provider-openstack 2.36.5

2 of the 7 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0

Open the chart page →

3,667
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

36,798
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0

Open the chart page →

33,411
fluent-operatorfluent4.3.01 of 1See more

fluent-operator fluent 4.3.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluent-operator/fluent-operator:3.10.03108194a4ecc
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0

Open the chart page →

150
gatekeepergogatekeeperVerified publisher0.1.651 of 1See more

gatekeeper gogatekeeper 0.1.65

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/gogatekeeper/gatekeeper:5.0.03d45202b06be
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0

Open the chart page →

6
hcloud-csihcloud2.23.03 of 6See more

hcloud-csi hcloud 2.23.0

3 of the 6 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.36.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.40.0
1.45.0
1.45.0
1.45.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.39.0
go.opentelemetry.io/otel/sdk@v1.39.0
1.45.0
1.45.0
1.45.0

Open the chart page →

2,689
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0

Open the chart page →

22,747
kube-greenkube-green-officialOfficialVerified publisher0.7.11 of 1See more

kube-green kube-green-official 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
kubegreen/kube-green:0.7.12dc0f0a6034c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0

Open the chart page →

507
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
temporalio/server:1.22.4c0a44c26397b
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.16.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.16.0
go.opentelemetry.io/otel/sdk@v1.16.0
1.45.0
1.45.0
1.45.0

Open the chart page →

14,929
nuclionuclio0.23.81 of 2See more

nuclio nuclio 0.23.8

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/nuclio/dashboard:1.17.8-amd64b5f5bd4efbee
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

982
k8s-infrasignoz0.17.11 of 1See more

k8s-infra signoz 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,188
tailing-sidecar-operatortailing-sidecar-operatorOfficialVerified publisher0.111.01 of 2See more

tailing-sidecar-operator tailing-sidecar-operator 0.111.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0

Open the chart page →

1,220
astarte-operatorastarteOfficialVerified publisher26.5.21 of 1See more

astarte-operator astarte 26.5.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
astarte/astarte-kubernetes-operator:26.5.1e3ff1b3c0c98
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0

Open the chart page →

709
codercoderOfficialVerified publisher1.44.61 of 2See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
go.opentelemetry.io/otel/sdk@v1.11.1
1.45.0

Open the chart page →

7,188

Container images carrying it

1,423 by charts deploying them

A fixed version is listed for 6 of the 6 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v0.5.4be477ba317d8
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0
go.opentelemetry.io/otel/sdk@v1.33.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.34.07b172f42533c
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/capi-operator/cluster-api-operator:v0.29.0465e72f8b06a
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.15.1
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.15.1
go.opentelemetry.io/otel/sdk@v1.15.1
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0
go.opentelemetry.io/otel/sdk@v1.28.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
go.opentelemetry.io/otel/sdk@v1.38.0
1.45.0
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
go.opentelemetry.io/otel/sdk@v1.37.0
1.45.0
1
registry.k8s.io/etcd:3.6.4-0e36c08168342
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0
go.opentelemetry.io/otel/sdk@v1.20.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0
go.opentelemetry.io/otel/sdk@v1.19.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0
go.opentelemetry.io/otel/sdk@v1.10.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0
go.opentelemetry.io/otel/sdk@v1.10.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0
go.opentelemetry.io/otel/sdk@v1.10.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/kwok/kwok:v0.8.06d25aa8fbdfe
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.44.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0
go.opentelemetry.io/otel/sdk@v1.21.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0
go.opentelemetry.io/otel/sdk@v1.21.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.20.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0
go.opentelemetry.io/otel/sdk@v1.20.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.1e6a43c83ab16
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0
go.opentelemetry.io/otel/sdk@v1.10.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.36.0e354e40db2d0
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0
go.opentelemetry.io/otel/sdk@v1.43.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0
go.opentelemetry.io/otel/sdk@v1.34.0
1.45.0
1.45.0
1.45.0
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.