CVE-2026-81872
MediumAdvisory
Published 29 Sept 2026In the index since 30 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- 0.005
- 42nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 173
- of 17,957 indexed, latest versions
- Container images
- 169
- deployed by those charts
- Fix available
- 1 of 1
- affected package
OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full
Carried by container images the latest versions of 173 of 17,957 indexed charts deploy, on 169 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v0.4.0, v0.5.0, v0.6.0, v0.7.0+12 more | 0.21.0 | 169 |
- OSV records
- GHSA-hjf4-fphr-2h65
Charts affected
173 by stars
Container images carrying it
169 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| otel/ | 5ac3e0ba2b0b | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | 923eb1cfae32 | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | b3079f45e19b | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | f2f01157055a | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | faf125d656fa | go.opentelemetry.io/ | 0.21.0 | 1 |
| otel/ | 1e45d9483faa | go.opentelemetry.io/ | 0.21.0 | 1 |
| percona/ | 003f9c25f842 | go.opentelemetry.io/ | 0.21.0 | 1 |
| pipekit13/ | 898b89236584 | go.opentelemetry.io/ | 0.21.0 | 1 |
| posit/ | 68d47a7a8166 | go.opentelemetry.io/ | 0.21.0 | 1 |
| pulumi/ | 6fca5e82daf8 | go.opentelemetry.io/ | 0.21.0 | 1 |
| rancher/ | 72dacd6919c4 | go.opentelemetry.io/ | 0.21.0 | 1 |
| robiningelbrecht/ | 40842cdfd616 | go.opentelemetry.io/ | 0.21.0 | 1 |
| rotationalio/ | f8d8b694515a | go.opentelemetry.io/ | 0.21.0 | 1 |
| semaphoreui/ | e9260bfa8255 | go.opentelemetry.io/ | 0.21.0 | 1 |
| signoz/ | 8890bd16bae9 | go.opentelemetry.io/ | 0.21.0 | 1 |
| signoz/ | deb566a7a3c0 | go.opentelemetry.io/ | 0.21.0 | 1 |
| solarwinds/ | 3c1110e8bdfb | go.opentelemetry.io/ | 0.21.0 | 1 |
| superseriousbusiness/ | 0078ca451dda | go.opentelemetry.io/ | 0.21.0 | 1 |
| sysadminsmedia/ | 56e880b62309 | go.opentelemetry.io/ | 0.21.0 | 1 |
| uptrace/ | 34a02c3b2d12 | go.opentelemetry.io/ | 0.21.0 | 1 |
| venturenox/ | c11d32f18718 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 16759fa523f8 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 54a193b757da | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 896e4926e0d7 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 40b804fce7f9 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | bd3cc22d1bdb | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | a8c8297c7274 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 0edfc075277b | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | e2443833726a | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 4ba3adf47f5c | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | d353720b037a | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 20f066d0f631 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 6adeef9ac700 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 50b431281d3e | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 0cca6760763a | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 9bc88940affc | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 07011b628e6b | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 9c7bc0f9bb35 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 32234e63c1d0 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 2434560e8f0e | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 457bb5ada68b | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | a6d5abe94706 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 590e50477b76 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 5e331c925091 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 79b81912f1fb | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 89490ef63b72 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 45bdeaf3fcd6 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 4183bd731bcc | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 8dd77ed01565 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | a410a7ed1ee8 | go.opentelemetry.io/ | 0.21.0 | 1 |