Go/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc CVE-2026-81870: low, EPSS 0.19%

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Action: Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to 1.45.0 or later.

go get go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.45.0

Affected

Fixed versions

Sources

• osv: GHSA-8wmf-6v46-5gfg#Go/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
• https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg
• https://nvd.nist.gov/vuln/detail/CVE-2026-81870
• https://github.com/open-telemetry/opentelemetry-go/pull/8438
• https://github.com/open-telemetry/opentelemetry-go/commit/3a1412d2b3bc4e4231fbeac2ed42117ae541bb38
• https://github.com/open-telemetry/opentelemetry-go
• https://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/zipkin/v1.45.0
• https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.45.0

CVE-2026-81870 · published 2026-09-17T20:31:06Z · modified 2026-10-01T20:55:52.479756803Z · JSON