GO-2026-6505

Source
https://pkg.go.dev/vuln/GO-2026-6505
Import Source
https://vuln.go.dev/ID/GO-2026-6505.json
JSON Data
https://api.osv.dev/v1/vulns/GO-2026-6505
Aliases
Downstream
CGA (35)
Published
2026-10-01T20:23:56Z
Modified
2026-10-01T20:45:11Z
Summary
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace
Details

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace

Database specific
{
    "review_status":  "UNREVIEWED",
    "url":  "https://pkg.go.dev/vuln/GO-2026-6505"
}
References

Affected packages

Go
go.opentelemetry.io/otel/exporters/otlp/otlptrace

Package

Name
go.opentelemetry.io/otel/exporters/otlp/otlptrace
View open source insights on deps.dev
Purl
pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace

Affected ranges

Type
SEMVER
Events
Introduced
1.5.0
Fixed
1.45.0

Database specific

source
"https://vuln.go.dev/ID/GO-2026-6505.json"
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc

Package

Name
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
View open source insights on deps.dev
Purl
pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc

Affected ranges

Type
SEMVER
Events
Introduced
1.5.0
Fixed
1.45.0

Database specific

source
"https://vuln.go.dev/ID/GO-2026-6505.json"
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp

Package

Name
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
View open source insights on deps.dev
Purl
pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp

Affected ranges

Type
SEMVER
Events
Introduced
1.5.0
Fixed
1.45.0

Database specific

source
"https://vuln.go.dev/ID/GO-2026-6505.json"
go.opentelemetry.io/otel/exporters/zipkin

Package

Name
go.opentelemetry.io/otel/exporters/zipkin
View open source insights on deps.dev
Purl
pkg:golang/go.opentelemetry.io/otel/exporters/zipkin

Affected ranges

Type
SEMVER
Events
Introduced
1.5.0
Fixed
1.45.0

Database specific

source
"https://vuln.go.dev/ID/GO-2026-6505.json"
go.opentelemetry.io/otel/sdk

Package

Name
go.opentelemetry.io/otel/sdk
View open source insights on deps.dev
Purl
pkg:golang/go.opentelemetry.io/otel/sdk

Affected ranges

Type
SEMVER
Events
Introduced
1.5.0
Fixed
1.45.0

Database specific

source
"https://vuln.go.dev/ID/GO-2026-6505.json"