CVE-2026-81872
MediumAdvisory
Published 29 Sept 2026In the index since 30 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- 0.005
- 42nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 173
- of 17,957 indexed, latest versions
- Container images
- 169
- deployed by those charts
- Fix available
- 1 of 1
- affected package
OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full
Carried by container images the latest versions of 173 of 17,957 indexed charts deploy, on 169 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v0.4.0, v0.5.0, v0.6.0, v0.7.0+12 more | 0.21.0 | 169 |
- OSV records
- GHSA-hjf4-fphr-2h65
Charts affected
173 by stars
Container images carrying it
169 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | f50931848bd8 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 2d1f9ae67c17 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 2ebef928d7e5 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 35c41e0fd029 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 70d9599b186c | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 74144189b384 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 7cb8c64c4d57 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | a1701c218024 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | ab5cb380e3ff | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | ba93c9d192e5 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 87f0a0676737 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 92bd5700577b | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | cd6e176883a9 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | efd47c67f9ba | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 1e9bfcff3867 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | fbb984bab741 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 42f541f22063 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 09d8c3ce4f3a | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 8dcfdf466da0 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | cfd00e7f73c2 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 32fe838b79dd | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 3076b8dcdfb3 | go.opentelemetry.io/ | 0.21.0 | 1 |
| hoppscotch/ | e7ba6061a286 | go.opentelemetry.io/ | 0.21.0 | 1 |
| instill/ | c4a393e601ed | go.opentelemetry.io/ | 0.21.0 | 1 |
| instill/ | ebe12f77a3f9 | go.opentelemetry.io/ | 0.21.0 | 1 |
| instill/ | e980125e5ba5 | go.opentelemetry.io/ | 0.21.0 | 1 |
| jaegertracing/ | 46a886260e04 | go.opentelemetry.io/ | 0.21.0 | 1 |
| jaegertracing/ | e128b9adbb29 | go.opentelemetry.io/ | 0.21.0 | 1 |
| kvalitetsit/ | 0e66907ea266 | go.opentelemetry.io/ | 0.21.0 | 1 |
| langgenius/ | a9b91fd62c94 | go.opentelemetry.io/ | 0.21.0 | 1 |
| langgenius/ | 9e314c29a61f | go.opentelemetry.io/ | 0.21.0 | 1 |
| library/ | 0c994536bddb | go.opentelemetry.io/ | 0.21.0 | 1 |
| library/ | 834468128c76 | go.opentelemetry.io/ | 0.21.0 | 1 |
| library/ | fd374bae807c | go.opentelemetry.io/ | 0.21.0 | 1 |
| library/ | 104204dadedf | go.opentelemetry.io/ | 0.21.0 | 1 |
| library/ | 34d5089d0b41 | go.opentelemetry.io/ | 0.21.0 | 1 |
| library/ | 9c3b91d5fb77 | go.opentelemetry.io/ | 0.21.0 | 1 |
| library/ | f86a2cab1b5c | go.opentelemetry.io/ | 0.21.0 | 1 |
| lokxy/ | e4ac800dc55d | go.opentelemetry.io/ | 0.21.0 | 1 |
| nginx/ | 3e97f06dce1c | go.opentelemetry.io/ | 0.21.0 | 1 |
| nginx/ | d127d1013198 | go.opentelemetry.io/ | 0.21.0 | 1 |
| opencsghq/ | 587046575c2c | go.opentelemetry.io/ | 0.21.0 | 1 |
| opencsghq/ | 86ea22f495c7 | go.opentelemetry.io/ | 0.21.0 | 1 |
| openkruise/ | d3c6d69d2c39 | go.opentelemetry.io/ | 0.21.0 | 1 |
| orbitalreg/ | 45f2620337af | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | 6ed874ea083d | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | 125bdbeb7590 | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | 1ab0baba0ee3 | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | 37fa87091cfa | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | 3bc07732530c | go.opentelemetry.io/ | 0.21.0 | 1 |