{"action":"Upgrade go.opentelemetry.io/otel/sdk/log to 0.21.0 or later.","affected":[{"fixed":"0.21.0","introduced":"0"}],"component":"go.opentelemetry.io/otel/sdk/log","cve_ids":["CVE-2026-81872"],"ecosystem":"Go","epss":0.00383,"exploited":false,"fixed_versions":["0.21.0"],"ghsa_id":"GHSA-hjf4-fphr-2h65","id":"tcs_01M5KFCP7RGGVJT0WPJEEZ6NN9","modified_at":"2026-10-01T20:56:06.318497338Z","published_at":"2026-09-29T17:59:53Z","references":["https://osv.dev/vulnerability/GHSA-hjf4-fphr-2h65","https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hjf4-fphr-2h65","https://nvd.nist.gov/vuln/detail/CVE-2026-81872","https://github.com/open-telemetry/opentelemetry-go/issues/6797","https://github.com/open-telemetry/opentelemetry-go/pull/8620","https://github.com/open-telemetry/opentelemetry-go/commit/ba71b09e6ed272e93a669aeaec1e98b1df4cc582","https://github.com/open-telemetry/opentelemetry-go","https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/log/v0.21.0"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-hjf4-fphr-2h65","url":"https://osv.dev/vulnerability/GHSA-hjf4-fphr-2h65"}],"summary":"OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full"}