{"id":"EUVD-2026-81098","enisaUuid":"049f2c9f-1665-3fd1-ac27-8026ea6e8054","description":"OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration. Applications that call otel.SetLogger to enable OpenTelemetry internal Info logging can therefore record OTLP gRPC and HTTP collector endpoints, the OTLP HTTP Insecure flag, and complete Zipkin collector URLs. A person or system with access to those logs can learn internal collector topology and can recover credentials or tokens embedded in Zipkin URL user information or query strings. The default OpenTelemetry logger does not emit the event, and this path does not log OTLP authentication headers, TLS key material, or span payloads. This issue is fixed in version 1.45.0.","datePublished":"Sep 16, 2026, 8:03:28 PM","dateUpdated":"Sep 17, 2026, 2:58:07 PM","baseScore":2.0,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg\nhttps://github.com/open-telemetry/opentelemetry-go/pull/8438\nhttps://github.com/open-telemetry/opentelemetry-go/commit/3a1412d2b3bc4e4231fbeac2ed42117ae541bb38\nhttps://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/zipkin/v1.45.0\nhttps://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.45.0\n","aliases":"CVE-2026-81870\nGHSA-8wmf-6v46-5gfg\n","assigner":"GitHub_M","epss":0.27,"enisaIdProduct":[{"id":"742f0069-b92b-3e46-9cca-d29832b55b16","product":{"name":"opentelemetry-go","vendor":{"name":"open-telemetry"}},"product_version":"1.5.0, \u003c 1.45.0"}],"enisaIdVendor":[{"id":"5590fe32-7629-32ff-9ed9-53cba950a973","vendor":{"name":"open-telemetry"}}],"enisaIdVulnerability":[{"id":"c00b9033-697b-3373-8dca-b82a9d3773f7","vulnerability":{"id":"CVE-2026-81870","description":"OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration. Applications that call otel.SetLogger to enable OpenTelemetry internal Info logging can therefore record OTLP gRPC and HTTP collector endpoints, the OTLP HTTP Insecure flag, and complete Zipkin collector URLs. A person or system with access to those logs can learn internal collector topology and can recover credentials or tokens embedded in Zipkin URL user information or query strings. The default OpenTelemetry logger does not emit the event, and this path does not log OTLP authentication headers, TLS key material, or span payloads. This issue is fixed in version 1.45.0.","datePublished":"Sep 16, 2026, 8:03:28 PM","dateUpdated":"Sep 17, 2026, 2:58:07 PM","status":"PUBLISHED","baseScore":2.0,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg\nhttps://github.com/open-telemetry/opentelemetry-go/pull/8438\nhttps://github.com/open-telemetry/opentelemetry-go/commit/3a1412d2b3bc4e4231fbeac2ed42117ae541bb38\nhttps://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/zipkin/v1.45.0\nhttps://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.45.0\n","enisa_id":"EUVD-2026-81098\n","assigner":"GitHub_M","epss":0.27,"dataProcessed":"Nov 3, 2026, 7:20:42 AM","vulnerabilityProduct":[{"id":"2e1f3de8-0d81-377e-b080-050d879ab5cb","product":{"name":"opentelemetry-go","vendor":{"name":"open-telemetry"}},"product_version":"1.5.0, \u003c 1.45.0"}],"vulnerabilityVendor":[{"id":"73900c6d-b335-3d78-b559-2beeddb83de2","vendor":{"name":"open-telemetry"}}]}},{"id":"f22661ab-fc12-3c8d-8823-9d7d31d6b1c7","vulnerability":{"id":"GHSA-8wmf-6v46-5gfg","description":"OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs","datePublished":"Sep 17, 2026, 8:31:06 PM","dateUpdated":"Sep 17, 2026, 8:31:06 PM","baseScore":0.0,"references":"https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-81870\nhttps://github.com/open-telemetry/opentelemetry-go/pull/8438\nhttps://github.com/open-telemetry/opentelemetry-go/commit/3a1412d2b3bc4e4231fbeac2ed42117ae541bb38\nhttps://github.com/open-telemetry/opentelemetry-go\nhttps://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/zipkin/v1.45.0\nhttps://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.45.0\n","enisa_id":"EUVD-2026-81098\n","aliases":"GHSA-8wmf-6v46-5gfg\nCVE-2026-81870\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:06:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"31451569-69d7-373c-9e5f-eb349de60d68","advisory":{"id":"SUSE-SU-2026:24120-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Oct 8, 2026, 6:20:47 AM","dateUpdated":"Oct 15, 2026, 5:14:09 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24120-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624120-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624120-1/\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1283642\nhttps://bugzilla.suse.com/1284104\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-81870/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-63209\nCVE-2026-81870\nCVE-2026-85732\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"04aba8ae-fbb4-3fbe-ab2f-9f9797f2effe","product":{"name":"SUSE Linux Micro 6.2","vendor":{"name":"SUSE"}}},{"id":"4c23d1a0-9bfc-3a28-ba82-518db0c0b198","product":{"name":"helm-0:4.3.0-160000.2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"679ebf5a-3a2b-3db2-87ed-a5655318eefa","product":{"name":"helm-0:4.3.0-160000.2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"b0ad593e-5e3f-3372-bb9e-f4fd196bcf84","product":{"name":"helm-0:4.3.0-160000.2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"d3b5d189-3576-3bfc-8e65-312ce2602357","product":{"name":"helm-bash-completion-0:4.3.0-160000.2.1.noarch","vendor":{"name":"SUSE"}}}]}},{"id":"4006b207-1cc5-3970-819b-4b4385b1f774","advisory":{"id":"RHSA-2026:72475","description":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1","summary":"cert-manager Operator for Red Hat OpenShift 1.20.1","datePublished":"Sep 28, 2026, 11:35:29 AM","dateUpdated":"Oct 31, 2026, 9:36:28 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:72475\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72475.json\n","aliases":"CVE-2025-6170\nCVE-2026-1965\nCVE-2026-3783\nCVE-2026-5435\nCVE-2026-5928\nCVE-2026-6238\nCVE-2026-6653\nCVE-2026-8286\nCVE-2026-8458\nCVE-2026-8927\nCVE-2026-9547\nCVE-2026-11822\nCVE-2026-11824\nCVE-2026-11979\nCVE-2026-13757\nCVE-2026-14164\nCVE-2026-14456\nCVE-2026-14457\nCVE-2026-15588\nCVE-2026-16118\nCVE-2026-18798\nCVE-2026-29181\nCVE-2026-33186\nCVE-2026-39883\nCVE-2026-41989\nCVE-2026-46600\nCVE-2026-48864\nCVE-2026-54369\nCVE-2026-54370\nCVE-2026-54371\nCVE-2026-54874\nCVE-2026-56392\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-58010\nCVE-2026-58011\nCVE-2026-58012\nCVE-2026-58013\nCVE-2026-58014\nCVE-2026-58015\nCVE-2026-58016\nCVE-2026-58055\nCVE-2026-63072\nCVE-2026-63073\nCVE-2026-63074\nCVE-2026-63075\nCVE-2026-63076\nCVE-2026-63379\nCVE-2026-63381\nCVE-2026-63382\nCVE-2026-63383\nCVE-2026-63384\nCVE-2026-63385\nCVE-2026-63387\nCVE-2026-63388\nCVE-2026-74860\nCVE-2026-81870\nCVE-2026-84445\nCVE-2026-86138\nCVE-2026-86140\nCVE-2026-86142\nCVE-2026-86143\nCVE-2026-86144\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"00022196-0bdd-3bc5-a737-2350530b09b4","product":{"name":"registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:0329f6bd8b196ecd1fb76dde04b8f3b9b2e64a1064db05b7d5211b50d8353a95_amd64","vendor":{"name":"Red Hat"}}},{"id":"80bdc15c-18be-3824-9f90-8ebddfe24046","product":{"name":"registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:d95845d852edcc9ecb8683b1eb7a600514ce6e5d8b142615b062733098bddd18_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"9a8e2656-bbda-33a4-abaa-f955ff543688","product":{"name":"registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:b7288e241a54b176c6d247a05c7a0090a4cb3e00e75d1f6f737fb61f2f6bc78a_arm64","vendor":{"name":"Red Hat"}}},{"id":"bda1a56a-ad92-367c-9fba-d72220445073","product":{"name":"Cert Manager support for Red Hat OpenShift release 1.20","vendor":{"name":"Red Hat"}}},{"id":"ef66c28b-4f32-3331-b63b-fb8eddee328d","product":{"name":"registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:07d271da9e6742dfff939555037f5816eaca6510c75e4eca27f3b15bca663b39_s390x","vendor":{"name":"Red Hat"}}}]}},{"id":"5d3fe8a4-ca3f-336e-945a-87e361566736","advisory":{"id":"SUSE-SU-2026:24247-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Oct 8, 2026, 6:20:47 AM","dateUpdated":"Oct 21, 2026, 11:50:24 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24247-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624247-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624247-1/\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1283642\nhttps://bugzilla.suse.com/1284104\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-81870/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-63209\nCVE-2026-81870\nCVE-2026-85732\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"1ab98e77-b466-33fc-92a7-30c1896f7f68","product":{"name":"helm-fish-completion-0:4.3.0-160000.2.1.noarch","vendor":{"name":"SUSE"}}},{"id":"31514624-86f5-37fa-b9a3-00c0f62b188e","product":{"name":"helm-0:4.3.0-160000.2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"52935e33-b267-3df5-9e8b-5bd098f7f0a6","product":{"name":"SUSE Linux Enterprise Server for SAP applications 16.0","vendor":{"name":"SUSE"}}},{"id":"62945354-9489-3667-ace6-58833f155033","product":{"name":"helm-0:4.3.0-160000.2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"6a620340-36d6-31f9-b5b5-3cb28d39652a","product":{"name":"SUSE Linux Enterprise Server 16.0","vendor":{"name":"SUSE"}}},{"id":"c7be4849-2711-3937-8f21-10a212d78652","product":{"name":"helm-bash-completion-0:4.3.0-160000.2.1.noarch","vendor":{"name":"SUSE"}}},{"id":"ec77745b-4592-366f-a3c0-e3a2517f8049","product":{"name":"helm-0:4.3.0-160000.2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"f1c4c31f-0245-3684-99cd-c8d11d96d01a","product":{"name":"helm-zsh-completion-0:4.3.0-160000.2.1.noarch","vendor":{"name":"SUSE"}}}]}},{"id":"61c25111-9fe2-3434-8b16-606e1137a5ac","advisory":{"id":"msrc_CVE-2026-81870","description":"OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs","datePublished":"Sep 19, 2026, 1:05:45 AM","dateUpdated":"Oct 25, 2026, 1:44:11 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-81870.json\n","aliases":"CVE-2026-81870\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"05d30580-0c5b-3112-bb14-101f37482da0","product":{"name":"azl3 cert-manager 0:1.12.15-14.azl3","vendor":{"name":"Microsoft"}}},{"id":"1e2dcd1e-b1d8-389d-8faa-2185191c871a","product":{"name":"docker-compose","vendor":{"name":"Microsoft"}}},{"id":"1ec9c868-73ae-3627-832f-b56cbb2445d6","product":{"name":"etcd","vendor":{"name":"etcd-io"}}},{"id":"221b0a6d-639f-393b-a19b-42a31d49a4c8","product":{"name":"azl3 containerd2 0:2.3.4-1.azl3","vendor":{"name":"Microsoft"}}},{"id":"2eb6e650-37b8-368a-9d9f-9b2bbde9ad73","product":{"name":"opa","vendor":{"name":"open-policy-agent"}}},{"id":"31963d29-0602-3f6f-891c-52532c9af78c","product":{"name":"cloud-provider-kubevirt","vendor":{"name":"Microsoft"}}},{"id":"33951fb3-3e9b-307c-b5d2-4d9dfee7d5b4","product":{"name":"azl3 etcd 0:3.5.33-1.azl3","vendor":{"name":"Microsoft"}}},{"id":"36fc4637-1bc1-3f18-888d-d9ceb6030617","product":{"name":"cert-manager","vendor":{"name":"cert-manager"}}},{"id":"4f00023c-42c3-3ba9-9ba2-99d9cb0ce011","product":{"name":"azurelinux-image-tools","vendor":{"name":"Microsoft"}}},{"id":"5ea08fa9-3131-3c20-add2-c6e9c3c92fec","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"61a70ed0-affb-35db-9ebb-cd3a414817ed","product":{"name":"keda","vendor":{"name":"kedacore"}}},{"id":"658bed2e-8578-3538-b9d0-c7d850f2ceb6","product":{"name":"kata-containers","vendor":{"name":"kata-containers"}}},{"id":"6c527701-e66b-32f3-b7b1-6f494e2c960f","product":{"name":"kube-vip-cloud-provider","vendor":{"name":"Microsoft"}}},{"id":"710e7ced-faf6-3945-8524-24f794b45d0c","product":{"name":"moby-containerd-cc","vendor":{"name":"Microsoft"}}},{"id":"7ec0d5b7-2109-391d-80a6-6c0b9908a5b1","product":{"name":"flannel","vendor":{"name":"flannel-io"}}},{"id":"81e7c7b8-2a46-32d0-813c-a17346088540","product":{"name":"cri-tools","vendor":{"name":"Microsoft"}}},{"id":"824884c7-2c55-3c6c-a752-cea2a4af289c","product":{"name":"azl3 opa 0:0.63.0-5.azl3","vendor":{"name":"Microsoft"}}},{"id":"8ef3aa28-264e-3d28-bca2-6560c36d0909","product":{"name":"kata-containers-cc","vendor":{"name":"Microsoft"}}},{"id":"953e4b26-e976-3c5e-a51b-c08cf4f9069c","product":{"name":"Kubernetes","vendor":{"name":"Kubernetes"}}},{"id":"9653d5fb-59b5-3949-83dd-1fab0b410353","product":{"name":"azl3 flannel 0:0.24.2-32.azl3","vendor":{"name":"Microsoft"}}},{"id":"97f56490-b141-37a8-bdf1-56b51e3afe32","product":{"name":"prometheus-adapter","vendor":{"name":"Microsoft"}}},{"id":"a655b65d-ca11-3b47-81f4-bc4c5651d64f","product":{"name":"moby-engine","vendor":{"name":"Microsoft"}}},{"id":"b31d3f49-93a4-377d-a802-4e89dd1d257c","product":{"name":"containerd2","vendor":{"name":"Microsoft"}}},{"id":"c3250312-f5cf-3c6a-83b7-448ece03edb3","product":{"name":"azl3 azurelinux-image-tools 0:1.6.0-3.azl3","vendor":{"name":"Microsoft"}}},{"id":"ccefa727-29a5-3e50-9026-6a234c3b1658","product":{"name":"azl3 docker-buildx 0:0.14.0-17.azl3","vendor":{"name":"Microsoft"}}},{"id":"d02d29e0-3c89-3074-b4e6-a894d90c9d38","product":{"name":"azl3 kube-vip-cloud-provider 0:0.0.10-10.azl3","vendor":{"name":"Microsoft"}}},{"id":"d883f0cf-a460-3ffb-9883-0550d21ec9de","product":{"name":"docker-buildx","vendor":{"name":"Microsoft"}}},{"id":"f0ea2a83-f9c5-384d-995f-7aba6b860b6e","product":{"name":"azl3 docker-compose 0:2.27.0-14.azl3","vendor":{"name":"Microsoft"}}},{"id":"f691df2f-fc56-31c5-9d06-d38b2e247c7d","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}}]}},{"id":"697bd5a1-a8ad-3b93-81ed-53b28d1eb315","advisory":{"id":"openSUSE-SU-2026:11931-1","description":"velero-1.18.4-1.1 on GA media","summary":"velero-1.18.4-1.1 on GA media","datePublished":"Sep 29, 2026, 12:00:00 AM","dateUpdated":"Oct 2, 2026, 5:49:10 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11931-1.json\nhttps://www.suse.com/security/cve/CVE-2026-81870/\nhttps://www.suse.com/security/cve/CVE-2026-84445/\n","aliases":"CVE-2026-81870\nCVE-2026-84445\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"1235fa93-92ca-3109-8b12-f5ebeb8d8fdc","product":{"name":"velero-bash-completion-0:1.18.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2b0f2700-2e90-3a76-b6a1-30c3736a59de","product":{"name":"velero-zsh-completion-0:1.18.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"33f3b098-fb26-3afb-bb12-0f9ebd1d4813","product":{"name":"velero-bash-completion-0:1.18.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"376645a5-bbf6-3e3f-8314-8a84a7f22978","product":{"name":"velero-zsh-completion-0:1.18.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"3986a432-6329-3140-990c-1eb099e916c5","product":{"name":"velero-fish-completion-0:1.18.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3e29a72e-107e-372a-b931-a33ded750215","product":{"name":"velero-fish-completion-0:1.18.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"45a2be5f-c45e-34b7-af99-14e69f4833ff","product":{"name":"velero-0:1.18.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"848bb659-54bc-3bb0-8874-7f34bf22448c","product":{"name":"velero-zsh-completion-0:1.18.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"9190ce56-3322-33d0-9f51-0434bc866b36","product":{"name":"velero-0:1.18.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"bf5f44ee-5ee8-3ebc-ab80-04267c514fe5","product":{"name":"velero-zsh-completion-0:1.18.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"cef6e830-8f6c-3741-8524-b37c51db1ff3","product":{"name":"velero-0:1.18.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"d47359c4-a066-3250-a32f-94df2cf148e8","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"d6acc57f-53d4-39bf-b195-8ef5855d124b","product":{"name":"velero-fish-completion-0:1.18.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"f08957e7-3abf-3dfe-817f-c7e5dcf6403d","product":{"name":"velero-bash-completion-0:1.18.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f97260f6-03c2-3487-9f63-f6c3b7590524","product":{"name":"velero-bash-completion-0:1.18.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"fa72fb39-3d3d-3a28-bcb7-b552057ac069","product":{"name":"velero-0:1.18.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"fd6aa93d-ba01-3cf6-9d11-8519c7a5b30e","product":{"name":"velero-fish-completion-0:1.18.4-1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"6ec3f2df-413a-38e4-aea6-88caecbd036a","advisory":{"id":"openSUSE-SU-2026:11963-1","description":"helm-4.3.0-4.1 on GA media","summary":"helm-4.3.0-4.1 on GA media","datePublished":"Oct 2, 2026, 12:00:00 AM","dateUpdated":"Oct 3, 2026, 8:38:52 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11963-1.json\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-81870/\n","aliases":"CVE-2026-63209\nCVE-2026-81870\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"15e269af-874e-33d1-bdbf-61c399e16362","product":{"name":"helm-bash-completion-0:4.3.0-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"27478608-cafd-3113-9d35-066d61e5d983","product":{"name":"helm-fish-completion-0:4.3.0-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"4807175a-c1f2-3623-b35b-41b8c98a4e6d","product":{"name":"helm-0:4.3.0-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"4e0517e7-57d8-3f61-b92c-daaf4c8bfe7e","product":{"name":"helm-bash-completion-0:4.3.0-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"55eabc37-1a1f-39b8-9d9d-50444ec0f8a0","product":{"name":"helm-0:4.3.0-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"65892e9e-d1ec-3608-94ab-4395051d9caa","product":{"name":"helm-fish-completion-0:4.3.0-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"98b0f99a-2e2f-3b50-b94f-5ef5b67ee67a","product":{"name":"helm-0:4.3.0-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9a54add1-11c0-3a81-ac12-3d192bc9a6fe","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"9d55edaa-acba-3968-914e-443f42a50840","product":{"name":"helm-zsh-completion-0:4.3.0-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9e0b8db2-d30b-38fa-b6ec-31bc15a8bb5f","product":{"name":"helm-fish-completion-0:4.3.0-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a81e466c-3628-3c09-9111-aa90ddf0f3e7","product":{"name":"helm-zsh-completion-0:4.3.0-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"ac0ef9ef-2b60-3b20-a54f-c81bbc35b015","product":{"name":"helm-zsh-completion-0:4.3.0-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"aec06151-c14e-372c-9051-38135e20c24b","product":{"name":"helm-fish-completion-0:4.3.0-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"cd4c0787-0df5-3f57-beb7-9905a3572a88","product":{"name":"helm-bash-completion-0:4.3.0-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"cd506e62-ef2f-3cfa-8a5f-275294180173","product":{"name":"helm-0:4.3.0-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e0f5f293-7700-3cee-963e-1821fa86e301","product":{"name":"helm-zsh-completion-0:4.3.0-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f23b3ef4-15c6-3f60-a569-bfee921122d9","product":{"name":"helm-bash-completion-0:4.3.0-4.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"9ffdb632-cbdc-3e8b-acd1-7c633e87c877","advisory":{"id":"SUSE-SU-2026:24282-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Oct 19, 2026, 9:48:48 AM","dateUpdated":"Oct 26, 2026, 7:19:20 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24282-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624282-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624282-1/\nhttps://bugzilla.suse.com/1261935\nhttps://bugzilla.suse.com/1261938\nhttps://bugzilla.suse.com/1261939\nhttps://bugzilla.suse.com/1265428\nhttps://bugzilla.suse.com/1265758\nhttps://bugzilla.suse.com/1270127\nhttps://bugzilla.suse.com/1271660\nhttps://bugzilla.suse.com/1271997\nhttps://bugzilla.suse.com/1275024\nhttps://bugzilla.suse.com/1275025\nhttps://bugzilla.suse.com/1276327\nhttps://bugzilla.suse.com/1276510\nhttps://bugzilla.suse.com/1276514\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1281426\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://bugzilla.suse.com/1283642\nhttps://bugzilla.suse.com/1284104\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-35204/\nhttps://www.suse.com/security/cve/CVE-2026-35205/\nhttps://www.suse.com/security/cve/CVE-2026-35206/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-48978/\nhttps://www.suse.com/security/cve/CVE-2026-50151/\nhttps://www.suse.com/security/cve/CVE-2026-50163/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-56864/\nhttps://www.suse.com/security/cve/CVE-2026-56865/\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81870/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-33814\nCVE-2026-35204\nCVE-2026-35205\nCVE-2026-35206\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-48978\nCVE-2026-50151\nCVE-2026-50163\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-56864\nCVE-2026-56865\nCVE-2026-63209\nCVE-2026-78662\nCVE-2026-81870\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-85732\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"1e83493a-b796-3b88-b9d9-059829625ec7","product":{"name":"helm-0:4.3.0-slfo.1.1_1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2ecac57e-5314-33ad-a251-656e025c6f26","product":{"name":"helm-bash-completion-0:4.3.0-slfo.1.1_1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"5efff528-5220-3b4e-8125-fdba961fa6ea","product":{"name":"helm-0:4.3.0-slfo.1.1_1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"94cbe7d6-174c-30c8-8c12-4ba6073c140d","product":{"name":"helm-0:4.3.0-slfo.1.1_1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a7ef17e3-52b9-3d9b-b80f-1fcdfd4c2fc0","product":{"name":"SUSE Linux Micro 6.1","vendor":{"name":"SUSE"}}}]}},{"id":"ba621bec-b4b0-3a45-ade4-dfe39976c3f0","advisory":{"id":"openSUSE-SU-2026:22057-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Oct 8, 2026, 6:20:47 AM","dateUpdated":"Oct 19, 2026, 5:24:47 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22057-1.json\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1283642\nhttps://bugzilla.suse.com/1284104\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-81870/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-63209\nCVE-2026-81870\nCVE-2026-85732\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"349f963f-a835-3f11-a1df-f7dfab4d1ae2","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"a0b1d4b4-1642-33e3-91eb-cdeb0b4d758e","product":{"name":"helm-bash-completion-0:4.3.0-160000.2.1.noarch","vendor":{"name":"SUSE"}}},{"id":"b4d6f51c-3c45-3b68-8be4-ee3b8230d2ab","product":{"name":"helm-0:4.3.0-160000.2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"b8481e4c-bd5c-3fef-bcc5-7a1b596008b6","product":{"name":"helm-0:4.3.0-160000.2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e62cefff-c367-32fc-ac53-6559632e26c7","product":{"name":"helm-fish-completion-0:4.3.0-160000.2.1.noarch","vendor":{"name":"SUSE"}}},{"id":"eca866b9-5a73-392b-90a2-62be036fe90b","product":{"name":"helm-0:4.3.0-160000.2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"f434ad09-9f44-3854-9404-4638b4bd5d19","product":{"name":"helm-zsh-completion-0:4.3.0-160000.2.1.noarch","vendor":{"name":"SUSE"}}}]}},{"id":"c7f31788-ea29-302c-a0a1-8c9990e1311a","advisory":{"id":"RHSA-2026:72395","description":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1","summary":"cert-manager Operator for Red Hat OpenShift 1.20.1","datePublished":"Sep 28, 2026, 7:03:20 AM","dateUpdated":"Oct 31, 2026, 9:36:27 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:72395\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72395.json\n","aliases":"CVE-2025-6170\nCVE-2026-1965\nCVE-2026-3783\nCVE-2026-5435\nCVE-2026-5928\nCVE-2026-6238\nCVE-2026-6653\nCVE-2026-8286\nCVE-2026-8458\nCVE-2026-8927\nCVE-2026-9547\nCVE-2026-11822\nCVE-2026-11824\nCVE-2026-11979\nCVE-2026-13757\nCVE-2026-14164\nCVE-2026-14456\nCVE-2026-14457\nCVE-2026-15588\nCVE-2026-16118\nCVE-2026-18798\nCVE-2026-29181\nCVE-2026-33186\nCVE-2026-39883\nCVE-2026-41989\nCVE-2026-46600\nCVE-2026-48864\nCVE-2026-54369\nCVE-2026-54370\nCVE-2026-54371\nCVE-2026-54874\nCVE-2026-56392\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-58010\nCVE-2026-58011\nCVE-2026-58012\nCVE-2026-58013\nCVE-2026-58014\nCVE-2026-58015\nCVE-2026-58016\nCVE-2026-58055\nCVE-2026-63072\nCVE-2026-63073\nCVE-2026-63074\nCVE-2026-63075\nCVE-2026-63076\nCVE-2026-63379\nCVE-2026-63381\nCVE-2026-63382\nCVE-2026-63383\nCVE-2026-63384\nCVE-2026-63385\nCVE-2026-63387\nCVE-2026-63388\nCVE-2026-81870\nCVE-2026-84445\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"1584ae92-8166-3a20-8cec-859fe625685a","product":{"name":"Cert Manager support for Red Hat OpenShift release 1.20","vendor":{"name":"Red Hat"}}},{"id":"187193d7-ce52-3544-9a4c-4864fb38a02a","product":{"name":"registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a075b5bf1a14057655d4b5ab1c36287d834005d8ece1e8f9c08379820bef6bff_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"826a5a1e-2369-3d6d-9d59-c7317c2e014d","product":{"name":"registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:97a48da1700e1a339a8ea36ece2927b870f12ca5c0aea5234216c7179d66f6f3_s390x","vendor":{"name":"Red Hat"}}},{"id":"ccb44a36-eb30-392b-9c14-e6f57aadb99e","product":{"name":"registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a86de0c8870d4800a1da62dcd35b0f40909c13833ee8fca88fb7b626731576e8_arm64","vendor":{"name":"Red Hat"}}},{"id":"de24149f-0ed4-3923-86bb-f63bb0852186","product":{"name":"registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:11d39535560409a0bd51a541f08506048a69b817db68c0e847ccbf73c0feb282_amd64","vendor":{"name":"Red Hat"}}}]}}]}