CVE-2026-81870
LowAdvisory
Published 17 Sept 2026In the index since 18 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 2.0
- base score, highest
- EPSS
- 0.002
- 9th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,370
- of 17,805 indexed, latest versions
- Container images
- 1,395
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
Carried by container images the latest versions of 1,370 of 17,805 indexed charts deploy, on 1,395 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.8.0, v1.9.0+39 more | 1.45.0 | 1,372 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.9.0, v1.10.0+37 more | 1.45.0 | 1,099 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.10.0, v1.11.1+35 more | 1.45.0 | 1,012 |
| go.opentelemetry.io/ | v1.6.3, v1.7.0, v1.9.0, v1.10.0+34 more | 1.45.0 | 432 |
| go.opentelemetry.io/ | v1.7.0, v1.9.0, v1.11.1, v1.13.0+11 more | 1.45.0 | 38 |
- OSV records
- GHSA-8wmf-6v46-5gfg
- Trending
- Rank 2 in indexed charts, since 18 Sept 2026. See the ranking →
Charts affected
1,370 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| ownclouddjjudas21Verified publisher | 0.3.23 | 1 of 3See more | 10,254 |
| uptime-kumadjjudas21Verified publisher | 1.5.18 | 1 of 1See more | 4,267 |
| dnation-kubernetes-monitoring-stackdnationcloud | 4.0.3 | 5See more | — |
| gatekeeperdoubanVerified publisher | 3.17.1 | 1 of 3See more | 2,506 |
| drogue-cloud-examplesdrogue-iotVerified publisher | 0.7.11 | 1 of 6See more | 30,804 |
| drogue-cloud-metricsdrogue-iotVerified publisher | 0.7.11 | 1 of 8See more | 13,584 |
| rook-cephdtrdnk-helm-chartsVerified publisher | 0.0.1 | 1 of 2See more | 2,015 |
| temporaldtrdnk-helm-chartsVerified publisher | 0.35.0 | 2 of 13See more | 20,257 |
| cloudflaredduck-helm | 1.1.3 | 1 of 1See more | 1,477 |
| bordysnixVerified publisher | 0.0.8 | 1 of 1See more | 1,380 |
| api-gatewayeclipse-aeriosVerified publisher | 1.7.0 | 1 of 1See more | 1,427 |
| openfaas2eclipse-aeriosVerified publisher | 12.0.5 | 1 of 6See more | 6,842 |
| cert-manager-cpanel-dns-webhookegebackVerified publisher | 1.0.6 | 1 of 1See more | 1,299 |
| uptime-kumaegebackVerified publisher | 2.0.12 | 1 of 1See more | 30,645 |
| eg-universal-agent-operatoreg-universal-agent-operatorVerified publisher | 0.0.5 | 1 of 1See more | 581 |
| elastic-agentelasticVerified publisher | 9.5.4 | 1 of 2See more | 768 |
| kube-state-metricselasticVerified publisher | 6.1.0 | 1 of 1See more | 768 |
| netobserv-flowelastiflowVerified publisher | 0.11.0 | 1 of 1See more | 1,510 |
| parrot-mirroremmas-chartsVerified publisher | 1.0.0 | 1 of 1See more | 2,251 |
| kube-ecp-stackemqx-operator | 2.5.1 | 4 of 16See more | 23,974 |
| mariadb-operator-monitoringenixVerified publisher | 0.1.0 | 1 of 1See more | 745 |
| monitoring-proxyenixVerified publisher | 0.3.0 | 1 of 2See more | 3,997 |
| eoapi-supporteoapiVerified publisher | 0.1.7 | 3 of 7See more | 8,694 |
| thanoseosc-lot-1Verified publisher | 0.2.0 | 1 of 1See more | 851 |
| thanos-bucketeosc-lot-1Verified publisher | 0.1.0 | 1 of 1See more | 851 |
| upgrade-responderepinioVerified publisher | 0.2.0 | 1 of 5See more | 7,398 |
| cd-pipeline-operatorepmdedpVerified publisher | 2.32.0 | 1 of 1See more | 143 |
| codebase-operatorepmdedpVerified publisher | 2.35.0 | 1 of 1See more | 132 |
| edp-installepmdedpOfficialVerified publisher | 3.15.0 | 2 of 7See more | 2,069 |
| keycloak-operatorepmdedpVerified publisher | 1.35.0 | 1 of 1See more | 137 |
| nexus-operatorepmdedpVerified publisher | 3.6.0 | 1 of 1See more | 118 |
| sonar-operatorepmdedpVerified publisher | 3.4.0 | 1 of 1See more | 118 |
| erasereraser | 1.4.2 | 1 of 1See more | 106 |
| cbt-apiethereum-helm-chartsVerified publisher | 0.0.14 | 1 of 1See more | 416 |
| contributoorethereum-helm-chartsVerified publisher | 0.0.2 | 1 of 1See more | 892 |
| erpcethereum-helm-chartsVerified publisher | 0.0.4 | 1 of 1See more | 915 |
| forkyethereum-helm-chartsVerified publisher | 0.2.0 | 1 of 1See more | 1,769 |
| rpc-snooperethereum-helm-chartsVerified publisher | 0.0.2 | 1 of 1See more | 1,533 |
| syncoor-serverethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 964 |
| xatuethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 626 |
| xatu-cannonethereum-helm-chartsVerified publisher | 0.2.2 | 1 of 1See more | 626 |
| xatu-cbt-apiethereum-helm-chartsVerified publisher | 0.0.13 | 1 of 1See more | 1,232 |
| xatu-cl-mimicryethereum-helm-chartsVerified publisher | 0.0.2 | 1 of 1See more | 626 |
| xatu-consumoorethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 626 |
| xatu-discoveryethereum-helm-chartsVerified publisher | 0.0.6 | 1 of 1See more | 626 |
| xatu-mimicryethereum-helm-chartsVerified publisher | 0.0.7 | 1 of 1See more | 626 |
| xatu-relay-monitorethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 626 |
| xatu-sageethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 626 |
| xatu-sentryethereum-helm-chartsVerified publisher | 0.0.8 | 1 of 1See more | 626 |
| xatu-serverethereum-helm-chartsVerified publisher | 0.0.14 | 1 of 1See more | 626 |
Container images carrying it
1,395 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| artifacthub/ | 2d8365601f0e | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| artifacthub/ | 323d026e78c3 | go.opentelemetry.io/ | 1.45.0 | 1 |
| artifacthub/ | 5368d21a6e5c | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| artifacthub/ | 6596c8c4d955 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| astarte/ | e3ff1b3c0c98 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| authzed/ | db0d1a16e6a4 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| baserow/ | df0c42eb67e8 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| bitnamilegacy/ | 33ae872fc99d | go.opentelemetry.io/ | 1.45.0 | 1 |
| bitnamilegacy/ | cb8ab5515676 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| bitnamilegacy/ | 04a3044b384b | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| bitnamilegacy/ | 6dabb4a2088c | go.opentelemetry.io/ | 1.45.0 | 1 |
| bitnamilegacy/ | 8935e75fa5d1 | go.opentelemetry.io/ | 1.45.0 | 1 |
| bitnamilegacy/ | ba9f3b4b0b00 | go.opentelemetry.io/ | 1.45.0 | 1 |
| bitnamilegacy/ | c0ede65eb88e | go.opentelemetry.io/ | 1.45.0 | 1 |
| bitnamilegacy/ | cce234b4381a | go.opentelemetry.io/ | 1.45.0 | 1 |
| bitnamilegacy/ | d7cd0e172c4c | go.opentelemetry.io/ | 1.45.0 | 1 |
| bitnamilegacy/ | 08b1b7cb6a5b | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| bitnamilegacy/ | 0cb31d0fc356 | go.opentelemetry.io/ | 1.45.0 | 1 |
| bitnamilegacy/ | 5bf82b98c82c | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| bitnami/ | f7034c13af4e | go.opentelemetry.io/ | 1.45.0 | 1 |
| blipai/ | 737d5d19a312 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| bloxstaking/ | bf6d7d2fdc93 | go.opentelemetry.io/ | 1.45.0 | 1 |
| bonovoo/ | bb93b68fcd17 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| bytebase/ | 9fcde38c0d5f | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| calico/ | 8f04e4772a2b | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| calico/ | eadb3a25109a | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| casbin/ | cd30c9fc3d5a | go.opentelemetry.io/ | 1.45.0 | 1 |
| castopod/ | 4e4f0440520f | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| checkmk/ | c11b422210c4 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| clastix/ | a7c5d108810b | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| cleanstart/ | 544bdb8811e1 | go.opentelemetry.io/ | 1.45.0 | 1 |
| cloudflare/ | 14d9c6b01b29 | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 1 |
| cloudflare/ | 5d5f70a59d5e | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 1 |
| cloudflare/ | c18744ae1767 | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 1 |
| cloudflare/ | eb5c9324efe3 | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 1 |
| cloudflare/ | ff69a2225ad7 | go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 | 1 |
| coderenvs/ | 1deffc4670e6 | go.opentelemetry.io/ | 1.45.0 | 1 |
| concourse/ | 40a143ce5873 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| cybrarist/ | e9e2447ac666 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| daprio/ | 4be696707bd1 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| daprio/ | 7ba5d51e5b97 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| daprio/ | 763b9b70b0c8 | go.opentelemetry.io/ | 1.45.0 | 1 |
| daprio/ | c584428aa12d | go.opentelemetry.io/ | 1.45.0 | 1 |
| daprio/ | d8e1446da996 | go.opentelemetry.io/ | 1.45.0 | 1 |
| daprio/ | 1f507c1a181b | go.opentelemetry.io/ | 1.45.0 | 1 |
| darioackermann/ | 0d450bc4acc4 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 | 1 |
| darthsim/ | 3b709e4a0e5e | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| darthsim/ | 40f6eb807444 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| darthsim/ | 476cb08c816a | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |
| darthsim/ | 7d12c7c8fc66 | go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ go.opentelemetry.io/ | 1.45.0 1.45.0 1.45.0 1.45.0 | 1 |