{"id":"GO-2026-6505","revision":"4500a66712fc4dc2838f6eddb73b2c4d","records":[{"revision":"4500a66712fc4dc2838f6eddb73b2c4d","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6505","aliases":["CVE-2026-81870","GHSA-8wmf-6v46-5gfg"],"title":"OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace","description":"OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace","state":0,"publishedAt":"2026-10-01T20:23:56+00:00","modifiedAt":"2026-10-01T20:45:11.2730058+00:00","affected":[{"ecosystem":"Go","name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.5.0"},{"kind":"fixed","version":"1.45.0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.5.0"},{"kind":"fixed","version":"1.45.0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.5.0"},{"kind":"fixed","version":"1.45.0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"go.opentelemetry.io/otel/exporters/zipkin","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.5.0"},{"kind":"fixed","version":"1.45.0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"go.opentelemetry.io/otel/sdk","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.5.0"},{"kind":"fixed","version":"1.45.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg","https://nvd.nist.gov/vuln/detail/CVE-2026-81870","https://github.com/open-telemetry/opentelemetry-go/commit/3a1412d2b3bc4e4231fbeac2ed42117ae541bb38","https://github.com/open-telemetry/opentelemetry-go/pull/8438","https://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/zipkin/v1.45.0","https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.45.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6505","license":"OSV · upstream source license applies","key":"osv:GO-2026-6505","identifiers":["GO-2026-6505","CVE-2026-81870","GHSA-8wmf-6v46-5gfg"]},"retained":false,"historicalAffected":[]}],"coverage":[]}