CVE-2026-81871
MediumAdvisory
Published 17 Sept 2026In the index since 18 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- 0.002
- 10th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 172
- of 17,803 indexed, latest versions
- Container images
- 158
- deployed by those charts
- Fix available
- 1 of 1
- affected package
OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning
Carried by container images the latest versions of 172 of 17,803 indexed charts deploy, on 158 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v0.8.0, v0.9.0, v0.10.0, v0.11.0+9 more | 0.21.0 | 158 |
- OSV records
- GHSA-w34q-cm8f-9c5x
- Trending
- Rank 45 in indexed charts, since 18 Sept 2026. See the ranking →
Charts affected
172 by stars
Container images carrying it
158 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | 70d9599b186c | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 74144189b384 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | a1701c218024 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | ab5cb380e3ff | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | ba93c9d192e5 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 847c287ada0e | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 87f0a0676737 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 92bd5700577b | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | cd6e176883a9 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | efd47c67f9ba | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | fbb984bab741 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 07c6614a8f8b | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 42f541f22063 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 09d8c3ce4f3a | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 8dcfdf466da0 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 70cf34fcb09d | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 86a9ee744848 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | cfd00e7f73c2 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 32fe838b79dd | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 0296560ac66f | go.opentelemetry.io/ | 0.21.0 | 1 |
| hauler/ | 4671f9bb6c5a | go.opentelemetry.io/ | 0.21.0 | 1 |
| hoppscotch/ | d50725df661f | go.opentelemetry.io/ | 0.21.0 | 1 |
| instill/ | c4a393e601ed | go.opentelemetry.io/ | 0.21.0 | 1 |
| instill/ | ebe12f77a3f9 | go.opentelemetry.io/ | 0.21.0 | 1 |
| instill/ | e980125e5ba5 | go.opentelemetry.io/ | 0.21.0 | 1 |
| jaegertracing/ | 46a886260e04 | go.opentelemetry.io/ | 0.21.0 | 1 |
| jaegertracing/ | e128b9adbb29 | go.opentelemetry.io/ | 0.21.0 | 1 |
| jaegertracing/ | ede4864215be | go.opentelemetry.io/ | 0.21.0 | 1 |
| kvalitetsit/ | 0e66907ea266 | go.opentelemetry.io/ | 0.21.0 | 1 |
| langgenius/ | a9b91fd62c94 | go.opentelemetry.io/ | 0.21.0 | 1 |
| langgenius/ | 9e314c29a61f | go.opentelemetry.io/ | 0.21.0 | 1 |
| library/ | 13ba145cba2f | go.opentelemetry.io/ | 0.21.0 | 1 |
| library/ | 834468128c76 | go.opentelemetry.io/ | 0.21.0 | 1 |
| library/ | 104204dadedf | go.opentelemetry.io/ | 0.21.0 | 1 |
| library/ | 34d5089d0b41 | go.opentelemetry.io/ | 0.21.0 | 1 |
| library/ | 9c2a54d87f76 | go.opentelemetry.io/ | 0.21.0 | 1 |
| library/ | 9c3b91d5fb77 | go.opentelemetry.io/ | 0.21.0 | 1 |
| lokxy/ | e4ac800dc55d | go.opentelemetry.io/ | 0.21.0 | 1 |
| nginx/ | 3e97f06dce1c | go.opentelemetry.io/ | 0.21.0 | 1 |
| nginx/ | 520d439f9a9a | go.opentelemetry.io/ | 0.21.0 | 1 |
| novosga/ | 34b9acbe6e51 | go.opentelemetry.io/ | 0.21.0 | 1 |
| opencsghq/ | 587046575c2c | go.opentelemetry.io/ | 0.21.0 | 1 |
| opencsghq/ | 86ea22f495c7 | go.opentelemetry.io/ | 0.21.0 | 1 |
| openkruise/ | d3c6d69d2c39 | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | 6ed874ea083d | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | 3bc07732530c | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | a7343f018690 | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | b3079f45e19b | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | f2f01157055a | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | faf125d656fa | go.opentelemetry.io/ | 0.21.0 | 1 |