CVE-2026-81872
2 advisories.
Go/go.opentelemetry.io/otel/sdk/log CVE-2026-81872: medium, EPSS 0.38%
OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full
Action: Upgrade go.opentelemetry.io/otel/sdk/log to 0.21.0 or later.
go get go.opentelemetry.io/otel/sdk/log@v0.21.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.21.0 | - |
Fixed versions
| 0.21.0 |
Sources
- osv: GHSA-hjf4-fphr-2h65
- https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hjf4-fphr-2h65
- https://nvd.nist.gov/vuln/detail/CVE-2026-81872
- https://github.com/open-telemetry/opentelemetry-go/issues/6797
- https://github.com/open-telemetry/opentelemetry-go/pull/8620
- https://github.com/open-telemetry/opentelemetry-go/commit/ba71b09e6ed272e93a669aeaec1e98b1df4cc582
- https://github.com/open-telemetry/opentelemetry-go
- https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/log/v0.21.0
CVE-2026-81872 · published · modified · JSON
Go/go.opentelemetry.io/otel/sdk/log CVE-2026-81872: unknown, EPSS 0.38%
OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full in go.opentelemetry.io/otel/sdk/log
Action: Upgrade go.opentelemetry.io/otel/sdk/log to 0.21.0 or later.
go get go.opentelemetry.io/otel/sdk/log@v0.21.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.21.0 | - |
Fixed versions
| 0.21.0 |
Sources
- osv: GO-2026-6615
- https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hjf4-fphr-2h65
- https://github.com/open-telemetry/opentelemetry-go/commit/ba71b09e6ed272e93a669aeaec1e98b1df4cc582
- https://github.com/open-telemetry/opentelemetry-go/issues/6797
- https://github.com/open-telemetry/opentelemetry-go/pull/8620
- https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/log/v0.21.0
CVE-2026-81872 · published · modified · JSON