tocsin

CVE-2026-81870

10 advisories.

Go/go.opentelemetry.io/otel/sdk CVE-2026-81870: low

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Action: Upgrade go.opentelemetry.io/otel/sdk to 1.45.0 or later.

go get go.opentelemetry.io/otel/sdk@v1.45.0

Affected

introducedfixedlast affected
1.5.01.45.0-

Fixed versions

1.45.0

Sources

CVE-2026-81870 · published · modified · JSON

Go/go.opentelemetry.io/otel/exporters/otlp/otlptrace CVE-2026-81870: low

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Action: Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace to 1.45.0 or later.

go get go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.45.0

Affected

introducedfixedlast affected
1.5.01.45.0-

Fixed versions

1.45.0

Sources

CVE-2026-81870 · published · modified · JSON

Go/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc CVE-2026-81870: low

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Action: Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to 1.45.0 or later.

go get go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.45.0

Affected

introducedfixedlast affected
1.5.01.45.0-

Fixed versions

1.45.0

Sources

CVE-2026-81870 · published · modified · JSON

Go/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp CVE-2026-81870: low

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Action: Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to 1.45.0 or later.

go get go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.45.0

Affected

introducedfixedlast affected
1.5.01.45.0-

Fixed versions

1.45.0

Sources

CVE-2026-81870 · published · modified · JSON

Go/go.opentelemetry.io/otel/exporters/zipkin CVE-2026-81870: low

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Action: Upgrade go.opentelemetry.io/otel/exporters/zipkin to 1.45.0 or later.

go get go.opentelemetry.io/otel/exporters/zipkin@v1.45.0

Affected

introducedfixedlast affected
1.5.01.45.0-

Fixed versions

1.45.0

Sources

CVE-2026-81870 · published · modified · JSON

Go/go.opentelemetry.io/otel/exporters/otlp/otlptrace CVE-2026-81870: unknown

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace

Action: Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace to 1.45.0 or later.

go get go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.45.0

Affected

introducedfixedlast affected
1.5.01.45.0-

Fixed versions

1.45.0

Sources

CVE-2026-81870 · published · modified · JSON

Go/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc CVE-2026-81870: unknown

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace

Action: Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to 1.45.0 or later.

go get go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.45.0

Affected

introducedfixedlast affected
1.5.01.45.0-

Fixed versions

1.45.0

Sources

CVE-2026-81870 · published · modified · JSON

Go/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp CVE-2026-81870: unknown

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace

Action: Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to 1.45.0 or later.

go get go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.45.0

Affected

introducedfixedlast affected
1.5.01.45.0-

Fixed versions

1.45.0

Sources

CVE-2026-81870 · published · modified · JSON

Go/go.opentelemetry.io/otel/exporters/zipkin CVE-2026-81870: unknown

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace

Action: Upgrade go.opentelemetry.io/otel/exporters/zipkin to 1.45.0 or later.

go get go.opentelemetry.io/otel/exporters/zipkin@v1.45.0

Affected

introducedfixedlast affected
1.5.01.45.0-

Fixed versions

1.45.0

Sources

CVE-2026-81870 · published · modified · JSON

Go/go.opentelemetry.io/otel/sdk CVE-2026-81870: unknown

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace

Action: Upgrade go.opentelemetry.io/otel/sdk to 1.45.0 or later.

go get go.opentelemetry.io/otel/sdk@v1.45.0

Affected

introducedfixedlast affected
1.5.01.45.0-

Fixed versions

1.45.0

Sources

CVE-2026-81870 · published · modified · JSON