StackRadar

CVE-2026-81872

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
173
of 17,957 indexed, latest versions
Container images
169
deployed by those charts
Fix available
1 of 1
affected package

OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full

Carried by container images the latest versions of 173 of 17,957 indexed charts deploy, on 169 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdk/loggolangv0.4.0, v0.5.0, v0.6.0, v0.7.0+12 more0.21.0169
OSV records
GHSA-hjf4-fphr-2h65

Charts affected

173 by stars
ChartLatestAffected imagesRadar Score
caddy-reverse-proxyromholdings0.10.11 of 1See more

caddy-reverse-proxy romholdings 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
library/caddy:latest14a9c00d4e83
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0

Open the chart page →

249
beaconrotationalVerified publisher0.2.01 of 1See more

beacon rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
rotationalio/beacon:0.2.0f8d8b694515a
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0

Open the chart page →

1,134
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0

Open the chart page →

8,558
runwhen-localrunwhen-contribVerified publisher0.7.01 of 3See more

runwhen-local runwhen-contrib 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.153.06ed874ea083d
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0

Open the chart page →

3,580
sagawisesagawiseVerified publisher0.1.01 of 3See more

sagawise sagawise 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
venturenox/sagawise:latestc11d32f18718
go.opentelemetry.io/otel/sdk/log@v0.6.0
0.21.0

Open the chart page →

4,393
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0

Open the chart page →

13,193
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
go.opentelemetry.io/otel/sdk/log@v0.12.2
0.21.0

Open the chart page →

1,906
lokisb-helm-charts0.4.01 of 1See more

loki sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
grafana/loki:3.6.192bd5700577b
go.opentelemetry.io/otel/sdk/log@v0.12.2
0.21.0

Open the chart page →

844
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
go.opentelemetry.io/otel/sdk/log@v0.12.2
0.21.0

Open the chart page →

2,423
temposb-helm-charts0.4.01 of 1See more

tempo sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel/sdk/log@v0.13.0
0.21.0

Open the chart page →

971
semaphoresemaphore-light1.0.01 of 1See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
semaphoreui/semaphore:latest98ad9bc7a2a0
go.opentelemetry.io/otel/sdk/log@v0.14.0
0.21.0

Open the chart page →

1,453
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
go.opentelemetry.io/otel/sdk/log@v0.12.2
0.21.0

Open the chart page →

7,887
ctlog-tilessigstoreVerified publisher0.1.81 of 1See more

ctlog-tiles sigstore 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
ghcr.io/transparency-dev/tesseract/posix:v0.1.2b044edd23888
go.opentelemetry.io/otel/sdk/log@v0.20.0
0.21.0

Open the chart page →

299
tracing-stacksnubisks0.1.04 of 8See more

tracing-stack snubisks 0.1.0

4 of the 8 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
go.opentelemetry.io/otel/sdk/log@v0.12.2
0.21.0
grafana/loki:3.6.5847c287ada0e
go.opentelemetry.io/otel/sdk/log@v0.12.2
0.21.0
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel/sdk/log@v0.13.0
0.21.0
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
go.opentelemetry.io/otel/sdk/log@v0.14.0
0.21.0

Open the chart page →

5,819
kube-prometheus-stacksoftonic81.5.11 of 6See more

kube-prometheus-stack softonic 81.5.1

1 of the 6 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
go.opentelemetry.io/otel/sdk/log@v0.12.2
0.21.0

Open the chart page →

5,129
stunner-prometheusstunner0.2.11 of 4See more

stunner-prometheus stunner 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0

Open the chart page →

2,967
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0

Open the chart page →

7,250
truefoundry-monitoringtruefoundryVerified publisher0.1.61 of 8See more

truefoundry-monitoring truefoundry 0.1.6

1 of the 8 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
go.opentelemetry.io/otel/sdk/log@v0.12.2
0.21.0

Open the chart page →

4,732
victoria-metrics-k8s-stackwener0.95.01 of 7See more

victoria-metrics-k8s-stack wener 0.95.0

1 of the 7 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0

Open the chart page →

788
victoria-metrics-k8s-stackwenerme0.95.01 of 7See more

victoria-metrics-k8s-stack wenerme 0.95.0

1 of the 7 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0

Open the chart page →

788
registrywiremindVerified publisher0.1.11 of 1See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
go.opentelemetry.io/otel/sdk/log@v0.8.0
0.21.0

Open the chart page →

1,408
xboardxboard0.2.01 of 1See more

xboard xboard 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
ghcr.io/cedar2025/xboard:latest896e4926e0d7
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0

Open the chart page →

1,124
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-81872.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0

Open the chart page →

798

Container images carrying it

169 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/transparency-dev/tesseract/posix:v0.1.2b044edd23888
go.opentelemetry.io/otel/sdk/log@v0.20.0
0.21.0
1
ghcr.io/wasilak/go-hello-world:1.8.366d353e7693f
go.opentelemetry.io/otel/sdk/log@v0.14.0
0.21.0
1
public.ecr.aws/aws-observability/aws-otel-collector:v0.50.07968fb60db6a
go.opentelemetry.io/otel/sdk/log@v0.20.0
0.21.0
1
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
go.opentelemetry.io/otel/sdk/log@v0.7.0
0.21.0
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
go.opentelemetry.io/otel/sdk/log@v0.14.0
0.21.0
1
public.ecr.aws/dynatrace/dynatrace-operator:v1.10.252281db48c93
go.opentelemetry.io/otel/sdk/log@v0.20.0
0.21.0
1
public.ecr.aws/lumigo/lumigo-kubernetes-telemetry-proxy:691d548e59c2c8
go.opentelemetry.io/otel/sdk/log@v0.7.0
0.21.0
1
public.ecr.aws/lumigo/lumigo-kubernetes-watchdog:696458fcd61e0c
go.opentelemetry.io/otel/sdk/log@v0.11.0
0.21.0
1
quay.io/codefresh/dind:3.0.250885ab519dac
go.opentelemetry.io/otel/sdk/log@v0.20.0
0.21.0
1
quay.io/kubescape/kubescape:v4.0.1358651dce3376
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0
1
quay.io/kubescape/kubevuln:v0.3.4309bed2f723ea0
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0
1
quay.io/kubescape/node-agent:v0.3.2192044ed750f5e
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0
1
quay.io/kubescape/operator:v0.2.16901b2694425e9
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0
1
quay.io/kubescape/storage:v0.0.33101f2b053ace1
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0
1
quay.io/opstree/grafana:12.4.3b61c1ed2f015
go.opentelemetry.io/otel/sdk/log@v0.12.2
0.21.0
1
quay.io/opstree/loki:3.6-debian13bdfee214c7ea
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0
1
quay.io/opstree/opentelemetry-operator:0.149.0-debian13a21405ab9a9a
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0
1
quay.io/opstree/tempo:2.10.4-debian13cb734024b3fd
go.opentelemetry.io/otel/sdk/log@v0.19.0
0.21.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:mainaa62b23f2b5e
go.opentelemetry.io/otel/sdk/log@v0.18.0
0.21.0
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.