CVE-2026-81870

Low

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026

Severity: Low; worst across findings
CVSS: 2.0; base score, highest
EPSS: 0.002; 9th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,384; of 17,813 indexed, latest versions
Container images: 1,423; deployed by those charts
Fix available: 6 of 6; affected packages

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Carried by container images the latest versions of 1,384 of 17,813 indexed charts deploy, on 1,423 images.

Affected package	Affected versions	Fixed in	Images
go.opentelemetry.io/otel/sdkgolang	v1.6.3, v1.7.0, v1.8.0, v1.9.0+40 more	1.45.0	1,398
go.opentelemetry.io/otel/exporters/otlp/otlptracegolang	v1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more	1.45.0	1,115
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcgolang	v1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more	1.45.0	1,028
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpgolang	v1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more	1.45.0	439
go.opentelemetry.io/otel/exporters/zipkingolang	v1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more	1.45.0	37
kubernetes-1.36apk	1.36.4-r8	1.36.4-r10	1

OSV records: CGA-2c9g-p4w2-5539 GHSA-8wmf-6v46-5gfg
Also known as: CGA-3wf9-xxx4-3cwx, CGA-6492-hrx3-qqwg, CGA-7fm4-77h5-5xv5, CGA-7r7f-p2pr-7w6x, CGA-94hm-pgxc-g949, CGA-95h5-9cf3-7w6f, CGA-9v46-576g-p8q6, CGA-9w5x-grm4-mwqw, CGA-cmx9-cm4w-g6rc, CGA-cph3-6489-7mr5, CGA-f878-h3vr-ph69, CGA-f9g5-hvh2-cxwg, CGA-fgxv-46pw-wrrg, CGA-fjx9-g624-j5w2, CGA-g9fj-pqfm-pxhj, CGA-gvrh-v65x-4f64, CGA-hvph-q6vw-mp7h, CGA-jvxq-8v73-23wj, CGA-mf36-f5m8-jp98, CGA-mh5g-xj8h-63rj, CGA-p25p-9grf-8c4r, CGA-pgh3-5vjx-6h78, CGA-r2cr-m4m5-296p, CGA-rc9c-wr95-6pw5, CGA-wmp5-5fch-33v9, CGA-wwqw-q86j-r6j6, CGA-xgxm-29f7-q4c3, CGA-xv44-f9jp-whfv, CGA-xxjh-jh7q-vwjq
Trending: Rank 2 in indexed charts, since 18 Sept 2026. See the ranking →

Charts affected

1,384 by stars

Chart

Latest

Affected images

Radar Score

convoyconvoy

3.7.13

1 of 3 See more

convoy convoy 3.7.13

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
getconvoy/convoy :v26.7.6	f4934cc05e31	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

6,152

cortexcortex

3.3.8

1 of 4 See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/cortexproject/cortex :v1.21.1	8577eb292a01	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.39.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.39.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.39.0 go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

3,198

uptime-kumaduyet

0.1.8

1 of 1 See more

uptime-kuma duyet 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.18.5	a84767d7934f	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.6.3 go.opentelemetry.io/otel/sdk@v1.6.3	1.45.0 1.45.0

Open the chart page →

4,568

emqx-operatoremqx-operator

2.3.2

2 of 2 See more

emqx-operator emqx-operator 2.3.2

2 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.4	9c4976d47656	go.opentelemetry.io/otel/sdk@v1.29.0	1.45.0
ghcr.io/emqx/emqx-operator :2.3.2	3333ed546165	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0 go.opentelemetry.io/otel/sdk@v1.28.0	1.45.0 1.45.0 1.45.0

Open the chart page →

4,708

gethethereum-helm-charts

1.1.4

1 of 2 See more

geth ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ethereum/client-go :stable	b8ab3451a117	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.41.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.41.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.41.0 go.opentelemetry.io/otel/sdk@v1.41.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

633

keptnlifecycle-toolkit

0.11.0

2 of 3 See more

keptn lifecycle-toolkit 0.11.0

2 of the 3 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.31.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.31.0 go.opentelemetry.io/otel/sdk@v1.31.0	1.45.0 1.45.0 1.45.0
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.31.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.31.0 go.opentelemetry.io/otel/sdk@v1.31.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,957

meshery-operatormeshery

1.0.70

2 of 2 See more

meshery-operator meshery 1.0.70

2 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
alpine/k8s :1.35.6	b7a12c5ddf26	go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0
meshery/meshery-operator :1.0.5	0d245bc8b5c6	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.39.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

2,462

nginx-ingressnginx-ingress-chart

0.0.0-edge

1 of 1 See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
nginx/nginx-ingress :edge	520d439f9a9a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,410

olmolm

0.45.0

1 of 1 See more

olm olm 0.45.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/operator-framework/olm :v0.45.0	f228c7a6b8c5	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

448

opencostopencost-oci

2.5.31

1 of 2 See more

opencost opencost-oci 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost :1.121.2	de2784434527	go.opentelemetry.io/otel/sdk@v1.41.0	1.45.0

Open the chart page →

275

ketoory

0.64.0

1 of 1 See more

keto ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
oryd/keto :v26.2.0	bfdb8b9e283a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0 go.opentelemetry.io/otel/exporters/zipkin@v1.37.0 go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

979

oathkeeperory

0.64.0

1 of 1 See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
oryd/oathkeeper :v26.2.0	467329abde34	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.37.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.37.0 go.opentelemetry.io/otel/exporters/zipkin@v1.37.0 go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

932

pmmpercona

1.9.1

1 of 1 See more

pmm percona 1.9.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
percona/pmm-server :3.9.1	003f9c25f842	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

824

redis-enterprise-operatorredis-enterprise-operator-official

8.0.18-11

1 of 1 See more

redis-enterprise-operator redis-enterprise-operator-official 8.0.18-11

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
redislabs/operator :8.0.18-11	9078e713bb6a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

944

rekorsigstore

1.8.6

3 of 9 See more

rekor sigstore 1.8.6

3 of the 9 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/rekor/rekor-server :v1.5.4	100d793d68d0	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned	5a878e4e4f03	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned	28c5ff40963f	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0

Open the chart page →

5,530

swo-k8s-collectorsolarwinds

5.3.0

3 of 3 See more

swo-k8s-collector solarwinds 5.3.0

3 of the 3 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
solarwinds/solarwinds-otel-collector :0.152.3-k8s	3c1110e8bdfb	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0 1.45.0
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument :v0.9.0	26f82b148dfe	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0 1.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.0	6b2f0b6f2f86	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

2,445

sops-operatorsops-operator

0.10.1

1 of 2 See more

sops-operator sops-operator 0.10.1

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/peak-scale/sops-operator :0.10.1	1da9b716b792	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0

Open the chart page →

1,260

thehivestrangebee-helm

1.0.7

1 of 7 See more

thehive strangebee-helm 1.0.7

1 of the 7 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	go.opentelemetry.io/otel/sdk@v1.35.0	1.45.0

Open the chart page →

16,535

truenas-csptruenas-csp

1.2.4

4 of 11 See more

truenas-csp truenas-csp 1.2.4

4 of the 11 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0 1.45.0 1.45.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.39.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.39.0 go.opentelemetry.io/otel/sdk@v1.39.0	1.45.0 1.45.0 1.45.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0 1.45.0 1.45.0

Open the chart page →

6,027

uffizzi-controlleruffizzi-controller

2.4.6

2 of 11 See more

uffizzi-controller uffizzi-controller 2.4.6

2 of the 11 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.14.5	9c0527cab629	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0 go.opentelemetry.io/otel/sdk@v1.21.0	1.45.0 1.45.0 1.45.0
quay.io/jetstack/cert-manager-webhook :v1.14.5	ef419261a209	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0 go.opentelemetry.io/otel/sdk@v1.21.0	1.45.0 1.45.0 1.45.0

Open the chart page →

14,375

kubedbappscode

2026.7.10

7 of 8 See more

kubedb appscode 2026.7.10

7 of the 8 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/petset :v0.1.0	93fa0daf603c	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0 1.45.0 1.45.0
ghcr.io/appscode/sidekick :v0.0.15	d1036b07e348	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.36.0	1.45.0 1.45.0 1.45.0
ghcr.io/kubedb/kubedb-autoscaler :v0.51.0	5d1182ac21f0	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.37.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.37.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0
ghcr.io/kubedb/kubedb-crd-manager :v0.21.0	9506a6cb98d1	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.37.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.37.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0
ghcr.io/kubedb/kubedb-ops-manager :v0.53.0	6d4c9fe66e4f	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0
ghcr.io/kubedb/kubedb-provisioner :v0.66.0	824d6d78d451	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.38.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.38.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0
ghcr.io/kubedb/kubedb-webhook-server :v0.42.0	f7dcade6523b	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.37.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.37.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

4,502

cloudflaredartur9010

1.0.9

1 of 3 See more

cloudflared artur9010 1.0.9

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.26.0 go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0 1.45.0

Open the chart page →

3,023

celestia-appcelestia-labs

0.5.0

1 of 3 See more

celestia-app celestia-labs 0.5.0

1 of the 3 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-app :v3.7.0-arabica	23a9ec9b1879	go.opentelemetry.io/otel/sdk@v1.30.0	1.45.0

Open the chart page →

1,077

openstack-cloud-controller-managercloud-provider-openstack

2.36.5

1 of 1 See more

openstack-cloud-controller-manager cloud-provider-openstack 2.36.5

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
registry.k8s.io/provider-os/openstack-cloud-controller-manager :v1.36.0	e354e40db2d0	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

512

cloudquerycloudquery

39.0.4

1 of 1 See more

cloudquery cloudquery 39.0.4

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/cloudquery/cloudquery :6.40.0	40b804fce7f9	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0

Open the chart page →

553

cluster-api-operatorcluster-api-operator

0.29.0

1 of 1 See more

cluster-api-operator cluster-api-operator 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
registry.k8s.io/capi-operator/cluster-api-operator :v0.29.0	465e72f8b06a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

routercosmo-router

0.18.0

1 of 1 See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/router :0.243.0	5afcab98d9d7	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.23.1 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.23.1 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.23.1 go.opentelemetry.io/otel/sdk@v1.28.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

1,713

daskhubdask

2024.1.1

1 of 9 See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0

Open the chart page →

14,290

gitops-promotergitops-promoter

0.19.0

1 of 2 See more

gitops-promoter gitops-promoter 0.19.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.22.1	e8cad21b2f9a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

2,958

alloy-operatorgrafana

0.7.1

1 of 1 See more

alloy-operator grafana 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/grafana/alloy-operator :1.12.1	4ee4b71cf16a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

475

grafana-mcpgrafana-community

0.24.0

1 of 1 See more

grafana-mcp grafana-community 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
grafana/mcp-grafana :1.5.1	07c6614a8f8b	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

1,127

klusterviewklusterview

0.1.0

2 of 4 See more

klusterview klusterview 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
grafana/grafana :latest	ac461fb352ab	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0 1.45.0
quay.io/prometheus/prometheus :latest	5ce7540c3c00	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

3,695

gateway-operatorkong

0.6.1

1 of 1 See more

gateway-operator kong 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
kong/gateway-operator :1.6	03510967482b	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.35.0	1.45.0 1.45.0 1.45.0

Open the chart page →

881

testkubekubeshop

2.13.2

1 of 5 See more

testkube kubeshop 2.13.2

1 of the 5 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
kubeshop/testkube-minio :2025.10	d8e1af6aca99	go.opentelemetry.io/otel/sdk@v1.39.0	1.45.0

Open the chart page →

5,333

sbomscannerkubewarden

0.12.1

3 of 5 See more

sbomscanner kubewarden 0.12.1

3 of the 5 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/kubewarden/sbomscanner/controller :v0.12.1	153ccb651e49	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0
ghcr.io/kubewarden/sbomscanner/storage :v0.12.1	811ed0383187	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0
ghcr.io/kubewarden/sbomscanner/worker :v0.12.1	b4274b7cc473	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,035

venti-stackkuoss

0.5.0

3 of 9 See more

venti-stack kuoss 0.5.0

3 of the 9 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0 1.45.0
quay.io/prometheus/prometheus :v3.13.2	508729e0e2d1	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0 1.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.36.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.36.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

3,861

local-ailocalai

3.4.2

1 of 1 See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/go-skynet/local-ai :latest	0632c21ddbe4	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0

Open the chart page →

3,721

vclustermain

0.17.0

1 of 10 See more

vcluster main 0.17.0

1 of the 10 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
registry.k8s.io/etcd :3.6.4-0	e36c08168342	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0 go.opentelemetry.io/otel/sdk@v1.20.0	1.45.0 1.45.0 1.45.0

Open the chart page →

11,611

fulciosigstore

2.11.1

1 of 6 See more

fulcio sigstore 2.11.1

1 of the 6 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/fulcio :v1.8.8	ef72cf56c64b	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.42.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0

Open the chart page →

3,529

policy-controllersigstore

0.10.8

1 of 2 See more

policy-controller sigstore 0.10.8

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/policy-controller/policy-controllerdigest-pinned	0bcd60beb93f	go.opentelemetry.io/otel/sdk@v1.35.0	1.45.0

Open the chart page →

921

sops-secrets-operatorsops-secrets-operator

0.28.1

1 of 1 See more

sops-secrets-operator sops-secrets-operator 0.28.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/isindir/sops-secrets-operator :0.21.2	7bba7083dfa0	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0

Open the chart page →

857

steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetes

0.13.1

2 of 2 See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

2 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe :latest	a16ab5ca10a7	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.24.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.24.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe :latest	c0c8d53df9f3	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.35.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.35.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

5,651

topolvmtopolvm

17.2.0

1 of 1 See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/topolvm/topolvm-with-sidecar :0.41.1	70548dbe0c6a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.39.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.39.0	1.45.0 1.45.0 1.45.0

Open the chart page →

2,415

uffizzi-appuffizzi-app

1.3.0

2 of 14 See more

uffizzi-app uffizzi-app 1.3.0

2 of the 14 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0 go.opentelemetry.io/otel/sdk@v1.19.0	1.45.0 1.45.0 1.45.0
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0 go.opentelemetry.io/otel/sdk@v1.19.0	1.45.0 1.45.0 1.45.0

Open the chart page →

19,487

vault-secrets-webhookvault-secrets-webhook

1.23.1

1 of 1 See more

vault-secrets-webhook vault-secrets-webhook 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
ghcr.io/bank-vaults/vault-secrets-webhook :v1.23.1	98baf045a1c9	go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0

Open the chart page →

529

athens-proxyvolker-raschek

2.0.3

1 of 1 See more

athens-proxy volker-raschek 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
gomods/athens :v0.17.1	0f61d1e62359	go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0

Open the chart page →

2,046

athens-proxyathens-charts

0.17.1

1 of 1 See more

athens-proxy athens-charts 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
gomods/athens :v0.18.1	97cc113b34b0	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,307

prometheusavesha

19.3.0

1 of 4 See more

prometheus avesha 19.3.0

1 of the 4 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.11.2 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.11.2 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.11.2 go.opentelemetry.io/otel/sdk@v1.11.2	1.45.0 1.45.0 1.45.0 1.45.0

Open the chart page →

5,505

aws-node-termination-handleraws-node-termination-handler

0.27.6

1 of 1 See more

aws-node-termination-handler aws-node-termination-handler 0.27.6

1 of the 1 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.25.6	9ad31fb4e5be	go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0

Open the chart page →

528

snapschedulerbackube-helm-charts

3.5.0

1 of 2 See more

snapscheduler backube-helm-charts 3.5.0

1 of the 2 container images this version deploys carry CVE-2026-81870.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0 go.opentelemetry.io/otel/sdk@v1.28.0	1.45.0 1.45.0 1.45.0

Open the chart page →

1,240

Container images carrying it

1,423 by charts deploying them

A fixed version is listed for 6 of the 6 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/agent-sandbox/agent-sandbox-controller :v0.5.4	be477ba317d8	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.33.0	6ef10d108e0e	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.33.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.33.0 go.opentelemetry.io/otel/sdk@v1.33.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.34.0	7b172f42533c	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.34.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/capi-operator/cluster-api-operator :v0.29.0	465e72f8b06a	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.15.1 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.15.1 go.opentelemetry.io/otel/sdk@v1.15.1	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.27.0 go.opentelemetry.io/otel/sdk@v1.28.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/coredns/coredns :v1.13.2	94caebb89dcf	go.opentelemetry.io/otel/sdk@v1.38.0	1.45.0	1
registry.k8s.io/csi-secrets-store/driver :v1.6.1	b48d7d13dd06	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0	1
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	go.opentelemetry.io/otel/sdk@v1.37.0	1.45.0	1
registry.k8s.io/etcd :3.6.4-0	e36c08168342	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0 go.opentelemetry.io/otel/sdk@v1.20.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.19.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.19.0 go.opentelemetry.io/otel/sdk@v1.19.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/kwok/kwok :v0.8.0	6d25aa8fbdfe	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0 go.opentelemetry.io/otel/sdk@v1.21.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.21.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0 go.opentelemetry.io/otel/sdk@v1.21.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.20.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.20.0 go.opentelemetry.io/otel/sdk@v1.20.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.11.1	e6a43c83ab16	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.10.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.10.0 go.opentelemetry.io/otel/sdk@v1.10.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/provider-os/openstack-cloud-controller-manager :v1.36.0	e354e40db2d0	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0 go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/sig-storage/csi-attacher :v4.10.0	be59d0556508	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.34.0	1.45.0 1.45.0 1.45.0	1
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.34.0 go.opentelemetry.io/otel/sdk@v1.34.0	1.45.0 1.45.0 1.45.0	1