CVE-2026-81872
MediumAdvisory
Published 29 Sept 2026In the index since 30 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- 0.005
- 42nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 173
- of 17,957 indexed, latest versions
- Container images
- 169
- deployed by those charts
- Fix available
- 1 of 1
- affected package
OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full
Carried by container images the latest versions of 173 of 17,957 indexed charts deploy, on 169 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v0.4.0, v0.5.0, v0.6.0, v0.7.0+12 more | 0.21.0 | 169 |
- OSV records
- GHSA-hjf4-fphr-2h65
Charts affected
173 by stars
Container images carrying it
169 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | ac461fb352ab | go.opentelemetry.io/ | 0.21.0 | 12 |
| grafana/ | 69a5d2d957ca | go.opentelemetry.io/ | 0.21.0 | 7 |
| grafana/ | 65a578975943 | go.opentelemetry.io/ | 0.21.0 | 5 |
| grafana/ | 3c8fd3570dd9 | go.opentelemetry.io/ | 0.21.0 | 4 |
| grafana/ | 121a7a9ece6d | go.opentelemetry.io/ | 0.21.0 | 3 |
| grafana/ | 1107dd5274e0 | go.opentelemetry.io/ | 0.21.0 | 3 |
| grafana/ | 44148ad243c0 | go.opentelemetry.io/ | 0.21.0 | 3 |
| grafana/ | 0dac7d5cb383 | go.opentelemetry.io/ | 0.21.0 | 3 |
| library/ | 1be55279f18a | go.opentelemetry.io/ | 0.21.0 | 3 |
| mcp/ | 9362bcf6aa0e | go.opentelemetry.io/ | 0.21.0 | 3 |
| ghcr.io/ | a48f82c2c437 | go.opentelemetry.io/ | 0.21.0 | 3 |
| dunglas/ | 916834e49961 | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | 7790f6f7fbd8 | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | f94b1c82957a | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | 0f86bada30d6 | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | 2175aaa91c96 | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | 9e1e77ade304 | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | e932bd6ed0e0 | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | 847c287ada0e | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | 736f7459913d | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | 86a9ee744848 | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | f0561deb1c68 | go.opentelemetry.io/ | 0.21.0 | 2 |
| library/ | 14a9c00d4e83 | go.opentelemetry.io/ | 0.21.0 | 2 |
| library/ | de23def33b17 | go.opentelemetry.io/ | 0.21.0 | 2 |
| library/ | 24841fe2de73 | go.opentelemetry.io/ | 0.21.0 | 2 |
| library/ | 6b9cbca6fac4 | go.opentelemetry.io/ | 0.21.0 | 2 |
| otel/ | a7343f018690 | go.opentelemetry.io/ | 0.21.0 | 2 |
| otel/ | 32b3c8296dcc | go.opentelemetry.io/ | 0.21.0 | 2 |
| semaphoreui/ | 98ad9bc7a2a0 | go.opentelemetry.io/ | 0.21.0 | 2 |
| ghcr.io/ | e70364e88629 | go.opentelemetry.io/ | 0.21.0 | 2 |
| ghcr.io/ | 6b69512c00dc | go.opentelemetry.io/ | 0.21.0 | 2 |
| public.ecr.aws/ | 18cae836e9c7 | go.opentelemetry.io/ | 0.21.0 | 2 |
| public.ecr.aws/ | 0dfb323978f6 | go.opentelemetry.io/ | 0.21.0 | 2 |
| aapjeisbaas/ | 6b261abc7fb0 | go.opentelemetry.io/ | 0.21.0 | 1 |
| akeyless/ | d4768a9b089c | go.opentelemetry.io/ | 0.21.0 | 1 |
| amazon/ | 9dea6643715a | go.opentelemetry.io/ | 0.21.0 | 1 |
| checkmk/ | c11b422210c4 | go.opentelemetry.io/ | 0.21.0 | 1 |
| distribution/ | bca24727f400 | go.opentelemetry.io/ | 0.21.0 | 1 |
| emqxecp/ | 4c31d9bec846 | go.opentelemetry.io/ | 0.21.0 | 1 |
| falcosecurity/ | 1976da721518 | go.opentelemetry.io/ | 0.21.0 | 1 |
| foomo/ | 824f41463e9b | go.opentelemetry.io/ | 0.21.0 | 1 |
| gotenberg/ | 206a6c708fc6 | go.opentelemetry.io/ | 0.21.0 | 1 |
| gotenberg/ | 67097317623a | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 01a63f4e032c | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 06bdcbb51fc2 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 0f4434c92b3e | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 491b0578c049 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 84b76d56c594 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 8c7256f412fe | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | b8ec653c4423 | go.opentelemetry.io/ | 0.21.0 | 1 |