{"action":"Upgrade go.opentelemetry.io/otel/sdk/log to 0.21.0 or later.","affected":[{"fixed":"0.21.0","introduced":"0"}],"component":"go.opentelemetry.io/otel/sdk/log","cve_ids":["CVE-2026-81872"],"ecosystem":"Go","epss":0.00383,"exploited":false,"fixed_versions":["0.21.0"],"ghsa_id":"GHSA-hjf4-fphr-2h65","id":"tcs_01M5KGVT3VQDJ1AB8MS5V4BKK9","modified_at":"2026-10-01T20:45:14.982993973Z","published_at":"2026-10-01T20:24:10Z","references":["https://osv.dev/vulnerability/GO-2026-6615","https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hjf4-fphr-2h65","https://github.com/open-telemetry/opentelemetry-go/commit/ba71b09e6ed272e93a669aeaec1e98b1df4cc582","https://github.com/open-telemetry/opentelemetry-go/issues/6797","https://github.com/open-telemetry/opentelemetry-go/pull/8620","https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/log/v0.21.0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6615","url":"https://osv.dev/vulnerability/GO-2026-6615"}],"summary":"OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full in go.opentelemetry.io/otel/sdk/log"}