{"action":"Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to 1.45.0 or later.","affected":[{"fixed":"1.45.0","introduced":"1.5.0"}],"component":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc","cve_ids":["CVE-2026-81870"],"ecosystem":"Go","epss":0.00266,"exploited":false,"fixed_versions":["1.45.0"],"ghsa_id":"GHSA-8wmf-6v46-5gfg","id":"tcs_01M5KF4HSA36NQ8XCX7QMPWMM4","modified_at":"2026-10-01T20:55:52.479756803Z","published_at":"2026-09-17T20:31:06Z","references":["https://osv.dev/vulnerability/GHSA-8wmf-6v46-5gfg","https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg","https://nvd.nist.gov/vuln/detail/CVE-2026-81870","https://github.com/open-telemetry/opentelemetry-go/pull/8438","https://github.com/open-telemetry/opentelemetry-go/commit/3a1412d2b3bc4e4231fbeac2ed42117ae541bb38","https://github.com/open-telemetry/opentelemetry-go","https://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/zipkin/v1.45.0","https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.45.0"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-8wmf-6v46-5gfg#Go/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc","url":"https://osv.dev/vulnerability/GHSA-8wmf-6v46-5gfg"}],"summary":"OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs"}