{"matches":[{"vulnerability":{"id":"GHSA-8wmf-6v46-5gfg","dataSource":"https://github.com/advisories/GHSA-8wmf-6v46-5gfg","namespace":"github:language:go","severity":"Low","urls":["https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg","https://nvd.nist.gov/vuln/detail/CVE-2026-81870","https://github.com/open-telemetry/opentelemetry-go/pull/8438","https://github.com/open-telemetry/opentelemetry-go/commit/3a1412d2b3bc4e4231fbeac2ed42117ae541bb38","https://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/zipkin/v1.45.0","https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.45.0"],"description":"OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs","cvss":[{"type":"Secondary","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":2},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2026-81870","epss":0.00195,"percentile":0.08435,"date":"2026-10-09"}],"cwes":[{"cve":"CVE-2026-81870","cwe":"CWE-200","source":"security-advisories@github.com","type":"Secondary"},{"cve":"CVE-2026-81870","cwe":"CWE-532","source":"security-advisories@github.com","type":"Secondary"}],"fix":{"versions":["1.45.0"],"state":"fixed","available":[{"version":"1.45.0","date":"2026-09-18","kind":"first-observed"}]},"advisories":[],"risk":0.048749999999999995},"relatedVulnerabilities":[{"id":"CVE-2026-81870","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-81870","namespace":"nvd:cpe","severity":"Low","urls":["https://github.com/open-telemetry/opentelemetry-go/commit/3a1412d2b3bc4e4231fbeac2ed42117ae541bb38","https://github.com/open-telemetry/opentelemetry-go/pull/8438","https://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/zipkin/v1.45.0","https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.45.0","https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg"],"description":"OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration. Applications that call otel.SetLogger to enable OpenTelemetry internal Info logging can therefore record OTLP gRPC and HTTP collector endpoints, the OTLP HTTP Insecure flag, and complete Zipkin collector URLs. A person or system with access to those logs can learn internal collector topology and can recover credentials or tokens embedded in Zipkin URL user information or query strings. The default OpenTelemetry logger does not emit the event, and this path does not log OTLP authentication headers, TLS key material, or span payloads. This issue is fixed in version 1.45.0.","cvss":[{"source":"security-advisories@github.com","type":"Secondary","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2026-81870","epss":0.00195,"percentile":0.08435,"date":"2026-10-09"}],"cwes":[{"cve":"CVE-2026-81870","cwe":"CWE-200","source":"security-advisories@github.com","type":"Secondary"},{"cve":"CVE-2026-81870","cwe":"CWE-532","source":"security-advisories@github.com","type":"Secondary"}]}],"matchDetails":[{"type":"exact-direct-match","matcher":"go-module-matcher","searchedBy":{"language":"go","namespace":"github:language:go","package":{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace","version":"v1.40.0"}},"found":{"vulnerabilityID":"GHSA-8wmf-6v46-5gfg","versionConstraint":">=1.5.0,<=1.44.0 (go)"},"fix":{"suggestedVersion":"1.45.0"}}],"artifact":{"id":"8ec912de4f440946","name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace","version":"v1.40.0","type":"go-module","locations":[{"path":"/usr/bin/external-secrets","layerID":"sha256:ad4ff78fff857005de159ed82ab98be0fb61e27f5b68652ca282af8b3ebf2868","accessPath":"/usr/bin/external-secrets","annotations":{"evidence":"primary"}}],"language":"go","licenses":[],"cpes":["cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace:v1.40.0:*:*:*:*:*:*:*"],"purl":"pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0","upstreams":[],"metadataType":"GolangBinMetadata","metadata":{"goCompiledVersion":"go1.26.9","architecture":"amd64","h1Digest":"h1:QKdN8ly8zEMrByybbQgv8cWBcdAarwmIPZ6FThrWXJs=","mainModule":"github.com/external-secrets/external-secrets"}}},{"vulnerability":{"id":"GHSA-8wmf-6v46-5gfg","dataSource":"https://github.com/advisories/GHSA-8wmf-6v46-5gfg","namespace":"github:language:go","severity":"Low","urls":["https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg","https://nvd.nist.gov/vuln/detail/CVE-2026-81870","https://github.com/open-telemetry/opentelemetry-go/pull/8438","https://github.com/open-telemetry/opentelemetry-go/commit/3a1412d2b3bc4e4231fbeac2ed42117ae541bb38","https://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/zipkin/v1.45.0","https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.45.0"],"description":"OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs","cvss":[{"type":"Secondary","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":2},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2026-81870","epss":0.00195,"percentile":0.08435,"date":"2026-10-09"}],"cwes":[{"cve":"CVE-2026-81870","cwe":"CWE-200","source":"security-advisories@github.com","type":"Secondary"},{"cve":"CVE-2026-81870","cwe":"CWE-532","source":"security-advisories@github.com","type":"Secondary"}],"fix":{"versions":["1.45.0"],"state":"fixed","available":[{"version":"1.45.0","date":"2026-09-18","kind":"first-observed"}]},"advisories":[],"risk":0.048749999999999995},"relatedVulnerabilities":[{"id":"CVE-2026-81870","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-81870","namespace":"nvd:cpe","severity":"Low","urls":["https://github.com/open-telemetry/opentelemetry-go/commit/3a1412d2b3bc4e4231fbeac2ed42117ae541bb38","https://github.com/open-telemetry/opentelemetry-go/pull/8438","https://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/zipkin/v1.45.0","https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.45.0","https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg"],"description":"OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration. Applications that call otel.SetLogger to enable OpenTelemetry internal Info logging can therefore record OTLP gRPC and HTTP collector endpoints, the OTLP HTTP Insecure flag, and complete Zipkin collector URLs. A person or system with access to those logs can learn internal collector topology and can recover credentials or tokens embedded in Zipkin URL user information or query strings. The default OpenTelemetry logger does not emit the event, and this path does not log OTLP authentication headers, TLS key material, or span payloads. This issue is fixed in version 1.45.0.","cvss":[{"source":"security-advisories@github.com","type":"Secondary","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2026-81870","epss":0.00195,"percentile":0.08435,"date":"2026-10-09"}],"cwes":[{"cve":"CVE-2026-81870","cwe":"CWE-200","source":"security-advisories@github.com","type":"Secondary"},{"cve":"CVE-2026-81870","cwe":"CWE-532","source":"security-advisories@github.com","type":"Secondary"}]}],"matchDetails":[{"type":"exact-direct-match","matcher":"go-module-matcher","searchedBy":{"language":"go","namespace":"github:language:go","package":{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc","version":"v1.40.0"}},"found":{"vulnerabilityID":"GHSA-8wmf-6v46-5gfg","versionConstraint":">=1.5.0,<=1.44.0 (go)"},"fix":{"suggestedVersion":"1.45.0"}}],"artifact":{"id":"499f218c11eb5ee3","name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc","version":"v1.40.0","type":"go-module","locations":[{"path":"/usr/bin/external-secrets","layerID":"sha256:ad4ff78fff857005de159ed82ab98be0fb61e27f5b68652ca282af8b3ebf2868","accessPath":"/usr/bin/external-secrets","annotations":{"evidence":"primary"}}],"language":"go","licenses":[],"cpes":["cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracegrpc:v1.40.0:*:*:*:*:*:*:*"],"purl":"pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0","upstreams":[],"metadataType":"GolangBinMetadata","metadata":{"goCompiledVersion":"go1.26.9","architecture":"amd64","h1Digest":"h1:DvJDOPmSWQHWywQS6lKL+pb8s3gBLOZUtw4N+mavW1I=","mainModule":"github.com/external-secrets/external-secrets"}}}],"source":{"type":"image","target":{"userInput":"build/payload/external-secrets-v2.12.0-tpio.1","imageID":"sha256:c61ff13c43bd0504c6324dc1cc5006a2c3a91afcec0d6dac95d17f085ff870ad","manifestDigest":"sha256:f29c67bcff4c6796df8991dcb8d0e1d69e6f0769dbadc688139260aff559d0cf","mediaType":"application/vnd.oci.image.manifest.v1+json","tags":[],"imageSize":508361504,"layers":[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:9486261b5a13f63ca6904b36721527ac8f19df53d300560138d69ae9b4c203de","size":421935},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:621c35e751a51a9a9dc3e80aa0b7fe8be2a93402ea6ccd307d30852cd7776cda","size":23235},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:763a77745f27b86cf26b97887b6842d83720e63b1c48848c0ba9ee54e351d63a","size":753467},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:f0d0eff4c2312a7bd6e21797bdfea5eb35f60e76b555ce2b22794424af2cad36","size":818438},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:275a30dd8ce958b21daa9ad962c6fbc09f98306ee2f486b65c9075dc257b1412","size":88832},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4d049f83d9cf21d1f5cc0e11deaf36df02790d0e60c1a3829538fb4b61685368","size":0},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:af5aa97ebe6ce1604747ec1e21af7136ded391bcabe4acef882e718a87c86bcc","size":149},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:6f1cdceb6a3146f0ccb986521156bef8a422cdbb0863396f7f751f575ba308f4","size":0},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:bd3cdfae1d3fdd83a2231d608969b38b82349777c2fff9a7c12d54f8ac5c9b38","size":64},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4cde6b0bb6f50a5f255eef7b2a42162c661cf776b803225dcac9a659e396bb6b","size":0},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:ad51d0769d16ba578106a177987dfe3d2e02c1668c852b795b2f6b024068242a","size":497},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:187cfc6d1e3e8a40a5e64653bcd3239c140807dcf1c09e48021178705a5a6139","size":344},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:f2392a9484bf6b18f06beaf705b994e31dbb2716c99cf7d03c9c495cd107f364","size":260846},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:989bc586a9db23b74dfa6ec614d5133e0aab0001d8514c340a8fafec975e0627","size":295684349},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:ad4ff78fff857005de159ed82ab98be0fb61e27f5b68652ca282af8b3ebf2868","size":210309282},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:be4932988cb1fcd0722f70c11f4fa1d2d5e7f8abfcd2caa13f0f07554112863b","size":66}],"manifest":"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","config":"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","repoDigests":[],"architecture":"amd64","os":"linux","labels":{"description":"External Secrets Operator is a Kubernetes operator that integrates external secret management systems","io.buildah.version":"1.43.1","io.thepeoples.hardened.claim":"package-fixable CRITICAL/HIGH cleared vs upstream digest; not FIPS/FedRAMP","io.thepeoples.hardened.ladder":"b","io.thepeoples.hardened.replaces":"ghcr.io/external-secrets/external-secrets:v2.12.0@sha256:7a3c4f7e038fa0f86a3172da19b9388f3f4d846e87e9994ee3474c5b72a9330d","io.thepeoples.hardened.upstream":"ghcr.io/external-secrets/external-secrets:v2.12.0@sha256:7a3c4f7e038fa0f86a3172da19b9388f3f4d846e87e9994ee3474c5b72a9330d","maintainer":"cncf-externalsecretsop-maintainers@lists.cncf.io","org.opencontainers.image.version":"v2.12.0"}}},"distro":{"name":"debian","version":"13.7","idLike":[]},"descriptor":{"name":"grype","version":"0.120.1","configuration":{"output":["json"],"file":"","pretty":false,"distro":"","add-cpes-if-none":false,"output-template-file":"","check-for-app-update":true,"only-fixed":false,"only-notfixed":false,"ignore-wontfix":"","platform":"linux/amd64","search":{"scope":"squashed","unindexed-archives":false,"indexed-archives":true},"ignore":[{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"kernel-headers","version":"","language":"","type":"rpm","location":"","upstream-name":"kernel"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"},{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"linux(-.*)?-headers-.*","version":"","language":"","type":"deb","location":"","upstream-name":"linux.*"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"},{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"linux-libc-dev","version":"","language":"","type":"deb","location":"","upstream-name":"linux"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"},{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"linux-kbuild-.*","version":"","language":"","type":"deb","location":"","upstream-name":"linux.*"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"}],"exclude":[],"externalSources":{"enable":false,"maven":{"searchUpstreamBySha1":true,"baseUrl":"https://search.maven.org/solrsearch/select","rateLimit":300000000}},"match":{"java":{"using-cpes":false},"jvm":{"using-cpes":true},"dotnet":{"using-cpes":false},"golang":{"using-cpes":false,"always-use-cpe-for-stdlib":false,"allow-main-module-pseudo-version-comparison":false},"javascript":{"using-cpes":false},"python":{"using-cpes":false},"ruby":{"using-cpes":false},"rust":{"using-cpes":false},"hex":{"using-cpes":false},"stock":{"using-cpes":true},"dpkg":{"using-cpes":false,"missing-epoch-strategy":"zero","use-cpes-for-eol":false},"rpm":{"using-cpes":false,"missing-epoch-strategy":"auto","use-cpes-for-eol":false}},"fail-on-severity":"","registry":{"insecure-skip-tls-verify":false,"insecure-use-http":false,"ca-cert":""},"show-suppressed":false,"include-matcher-suppressions":false,"by-cve":false,"SortBy":{"sort-by":"risk"},"name":"","default-image-pull-source":"","from":null,"vex-documents":[],"vex-add":[],"match-upstream-kernel-headers":false,"fix-channel":{"redhat-eus":{"apply":"auto","versions":">= 8.0"},"ubuntu-esm":{"apply":"auto","versions":""}},"timestamp":true,"alerts":{"enable-eol-distro-warnings":true},"db":{"cache-dir":"/tmp/hardened-scanner-session.U3P5bf/grype","update-url":"https://grype.anchore.io/databases","ca-cert":"","auto-update":true,"validate-by-hash-on-start":true,"validate-age":true,"max-allowed-built-age":432000000000000,"require-update-check":false,"update-available-timeout":30000000000,"update-download-timeout":300000000000,"max-update-check-frequency":7200000000000},"exp":{},"dev":{"db":{"debug":false}}},"db":{"status":{"schemaVersion":"v6.1.10","from":"https://grype.anchore.io/databases/v6/vulnerability-db_v6.1.10_2026-10-10T00:34:49Z_1791613801.tar.zst?checksum=sha256%3A9c7673c1d8526a5696e6af4cd26f48c3d4ab34c30e40ffe212a811c44ab5f0c1","built":"2026-10-10T06:30:01Z","path":"/tmp/hardened-scanner-session.U3P5bf/grype/6/vulnerability.db","valid":true},"providers":{"alma":{"captured":"2026-10-10T00:35:19Z","input":"xxh64:fa6021eeb96614ec"},"alpine":{"captured":"2026-10-10T00:35:30Z","input":"xxh64:935f13d8c01d6fc4"},"amazon":{"captured":"2026-10-10T00:35:25Z","input":"xxh64:bc05a09fe38da3bd"},"arch":{"captured":"2026-10-10T00:34:51Z","input":"xxh64:1d10d154d8868105"},"bitnami":{"captured":"2026-10-10T00:34:59Z","input":"xxh64:bc896cdb9eeaf19f"},"chainguard":{"captured":"2026-10-10T00:35:25Z","input":"xxh64:7edca4844746ccfc"},"chainguard-libraries":{"captured":"2026-10-10T00:35:18Z","input":"xxh64:3ae753c47503b831"},"debian":{"captured":"2026-10-10T00:35:03Z","input":"xxh64:e71e120e6da87253"},"echo":{"captured":"2026-10-10T00:35:17Z","input":"xxh64:0758ad31e1529030"},"eol":{"captured":"2026-10-10T00:34:49Z","input":"xxh64:93f53484fb0342e9"},"epss":{"captured":"2026-10-10T00:35:07Z","input":"xxh64:aa4a3b9cb47532ce"},"fedora":{"captured":"2026-10-10T00:34:58Z","input":"xxh64:091c01790140411d"},"github":{"captured":"2026-10-10T00:35:35Z","input":"xxh64:ce27bb531ca44b73"},"govulndb":{"captured":"2026-10-10T00:34:54Z","input":"xxh64:b365aa1c51dad946"},"hummingbird":{"captured":"2026-10-10T00:37:31Z","input":"xxh64:c267f95d54ac3219"},"kev":{"captured":"2026-10-10T00:34:58Z","input":"xxh64:b0d499c7f5ff1cee"},"mariner":{"captured":"2026-10-10T00:34:54Z","input":"xxh64:3c820d09ff8ad6a3"},"minimos":{"captured":"2026-10-10T00:34:57Z","input":"xxh64:951565842d89bb69"},"nvd":{"captured":"2026-10-10T00:35:53Z","input":"xxh64:8c63c4f719534506"},"oracle":{"captured":"2026-10-10T00:35:23Z","input":"xxh64:4cbf6a809d7cebdf"},"photon":{"captured":"2026-10-10T00:35:18Z","input":"xxh64:d14c5749066516cb"},"rhel":{"captured":"2026-10-10T00:36:12Z","input":"xxh64:6ee76ae7b60b3b4d"},"secureos":{"captured":"2026-10-10T00:35:00Z","input":"xxh64:99ea90bc73b51505"},"sles":{"captured":"2026-10-10T00:36:45Z","input":"xxh64:c2efa7ddee8ab23d"},"ubuntu":{"captured":"2026-10-10T00:35:51Z","input":"xxh64:ff5039bbd738c793"},"wolfi":{"captured":"2026-10-10T00:35:47Z","input":"xxh64:fac495e865ef7e24"}}},"timestamp":"2026-10-10T21:11:26.317994229Z"}}