{"id":"CVE-2026-39883","summary":"OpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijacking","details":"OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed the Darwin ioreg command to use an absolute path but left the BSD kenv command using a bare name, allowing the same PATH hijacking attack on BSD and Solaris platforms. This vulnerability is fixed in 1.43.0.","aliases":["GHSA-hfvc-g4fc-pqhx"],"modified":"2026-04-09T12:02:49.098149Z","published":"2026-04-08T20:26:41.731Z","related":["CGA-vpw6-rgj5-prpf"],"database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-426"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39883.json"},"references":[{"type":"WEB","url":"http://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39883.json"},{"type":"ADVISORY","url":"https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hfvc-g4fc-pqhx"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39883"}],"affected":[{"ranges":[{"type":"GIT","repo":"http://github.com/open-telemetry/opentelemetry-go","events":[{"introduced":"8e76ab23b495ce2411d936b497fb8f1a9b35f974"},{"fixed":"9276201a64b623606e3eaa0d61ae8ee6d62756c0"}],"database_specific":{"versions":[{"introduced":"1.15.0"},{"fixed":"1.43.0"}]}}],"versions":["bridge/opencensus/test/v0.38.0","bridge/opencensus/test/v0.38.1","bridge/opencensus/test/v0.39.0","bridge/opencensus/test/v0.39.0-rc.1","bridge/opencensus/test/v0.40.0","bridge/opencensus/test/v0.41.0","bridge/opencensus/test/v0.42.0","bridge/opencensus/test/v0.42.0-rc.1","bridge/opencensus/test/v0.43.0","bridge/opencensus/test/v0.44.0","bridge/opencensus/test/v0.45.0","bridge/opencensus/test/v1.23.0","bridge/opencensus/test/v1.23.0-rc.1","bridge/opencensus/test/v1.23.1","bridge/opencensus/test/v1.24.0","bridge/opencensus/test/v1.25.0","bridge/opencensus/test/v1.26.0","bridge/opencensus/test/v1.27.0","bridge/opencensus/test/v1.28.0","bridge/opencensus/test/v1.29.0","bridge/opencensus/test/v1.30.0","bridge/opencensus/test/v1.31.0","bridge/opencensus/test/v1.32.0","bridge/opencensus/test/v1.33.0","bridge/opencensus/test/v1.34.0","bridge/opencensus/test/v1.35.0","bridge/opencensus/test/v1.36.0","bridge/opencensus/test/v1.37.0","bridge/opencensus/test/v1.38.0","bridge/opencensus/test/v1.39.0","bridge/opencensus/test/v1.40.0","bridge/opencensus/test/v1.41.0","bridge/opencensus/test/v1.42.0","bridge/opencensus/v0.38.0","bridge/opencensus/v0.38.1","bridge/opencensus/v0.39.0","bridge/opencensus/v0.39.0-rc.1","bridge/opencensus/v0.40.0","bridge/opencensus/v0.41.0","bridge/opencensus/v0.42.0","bridge/opencensus/v0.42.0-rc.1","bridge/opencensus/v0.43.0","bridge/opencensus/v0.44.0","bridge/opencensus/v0.45.0","bridge/opencensus/v1.23.0","bridge/opencensus/v1.23.0-rc.1","bridge/opencensus/v1.23.1","bridge/opencensus/v1.24.0","bridge/opencensus/v1.25.0","bridge/opencensus/v1.26.0","bridge/opencensus/v1.27.0","bridge/opencensus/v1.28.0","bridge/opencensus/v1.29.0","bridge/opencensus/v1.30.0","bridge/opencensus/v1.31.0","bridge/opencensus/v1.32.0","bridge/opencensus/v1.33.0","bridge/opencensus/v1.34.0","bridge/opencensus/v1.35.0","bridge/opencensus/v1.36.0","bridge/opencensus/v1.37.0","bridge/opencensus/v1.38.0","bridge/opencensus/v1.39.0","bridge/opencensus/v1.40.0","bridge/opencensus/v1.41.0","bridge/opencensus/v1.42.0","bridge/opentracing/test/v1.15.0","bridge/opentracing/test/v1.15.1","bridge/opentracing/test/v1.16.0","bridge/opentracing/test/v1.16.0-rc.1","bridge/opentracing/test/v1.17.0","bridge/opentracing/test/v1.18.0","bridge/opentracing/test/v1.19.0","bridge/opentracing/test/v1.19.0-rc.1","bridge/opentracing/test/v1.20.0","bridge/opentracing/test/v1.21.0","bridge/opentracing/test/v1.22.0","bridge/opentracing/test/v1.23.0","bridge/opentracing/test/v1.23.0-rc.1","bridge/opentracing/test/v1.23.1","bridge/opentracing/test/v1.24.0","bridge/opentracing/test/v1.25.0","bridge/opentracing/test/v1.26.0","bridge/opentracing/test/v1.27.0","bridge/opentracing/test/v1.28.0","bridge/opentracing/test/v1.29.0","bridge/opentracing/test/v1.30.0","bridge/opentracing/test/v1.31.0","bridge/opentracing/test/v1.32.0","bridge/opentracing/test/v1.33.0","bridge/opentracing/test/v1.34.0","bridge/opentracing/test/v1.35.0","bridge/opentracing/test/v1.36.0","bridge/opentracing/v1.15.0","bridge/opentracing/v1.15.1","bridge/opentracing/v1.16.0","bridge/opentracing/v1.16.0-rc.1","bridge/opentracing/v1.17.0","bridge/opentracing/v1.18.0","bridge/opentracing/v1.19.0","bridge/opentracing/v1.19.0-rc.1","bridge/opentracing/v1.20.0","bridge/opentracing/v1.21.0","bridge/opentracing/v1.22.0","bridge/opentracing/v1.23.0","bridge/opentracing/v1.23.0-rc.1","bridge/opentracing/v1.23.1","bridge/opentracing/v1.24.0","bridge/opentracing/v1.25.0","bridge/opentracing/v1.26.0","bridge/opentracing/v1.27.0","bridge/opentracing/v1.28.0","bridge/opentracing/v1.29.0","bridge/opentracing/v1.30.0","bridge/opentracing/v1.31.0","bridge/opentracing/v1.32.0","bridge/opentracing/v1.33.0","bridge/opentracing/v1.34.0","bridge/opentracing/v1.35.0","bridge/opentracing/v1.36.0","bridge/opentracing/v1.37.0","bridge/opentracing/v1.38.0","bridge/opentracing/v1.39.0","bridge/opentracing/v1.40.0","bridge/opentracing/v1.41.0","bridge/opentracing/v1.42.0","example/dice/v1.19.0","example/dice/v1.20.0","example/dice/v1.21.0","example/dice/v1.22.0","example/dice/v1.23.0","example/dice/v1.23.0-rc.1","example/dice/v1.23.1","example/dice/v1.24.0","example/dice/v1.25.0","example/dice/v1.26.0","example/dice/v1.27.0","example/dice/v1.28.0","example/dice/v1.29.0","example/dice/v1.30.0","example/dice/v1.31.0","example/fib/v1.15.0","example/fib/v1.15.1","example/fib/v1.16.0","example/fib/v1.16.0-rc.1","example/fib/v1.17.0","example/fib/v1.18.0","example/fib/v1.19.0","example/fib/v1.19.0-rc.1","example/fib/v1.20.0","example/jaeger/v1.15.0","example/jaeger/v1.15.1","example/jaeger/v1.16.0","example/jaeger/v1.16.0-rc.1","example/jaeger/v1.17.0","example/namedtracer/v1.15.0","example/namedtracer/v1.15.1","example/namedtracer/v1.16.0","example/namedtracer/v1.16.0-rc.1","example/namedtracer/v1.17.0","example/namedtracer/v1.18.0","example/namedtracer/v1.19.0","example/namedtracer/v1.19.0-rc.1","example/namedtracer/v1.20.0","example/namedtracer/v1.21.0","example/namedtracer/v1.22.0","example/namedtracer/v1.23.0","example/namedtracer/v1.23.0-rc.1","example/namedtracer/v1.23.1","example/namedtracer/v1.24.0","example/namedtracer/v1.25.0","example/namedtracer/v1.26.0","example/namedtracer/v1.27.0","example/namedtracer/v1.28.0","example/namedtracer/v1.29.0","example/namedtracer/v1.30.0","example/namedtracer/v1.31.0","example/opencensus/v0.38.0","example/opencensus/v0.38.1","example/opencensus/v0.39.0","example/opencensus/v0.39.0-rc.1","example/opencensus/v0.40.0","example/opencensus/v0.41.0","example/opencensus/v0.42.0","example/opencensus/v0.42.0-rc.1","example/opencensus/v0.43.0","example/opencensus/v0.44.0","example/opencensus/v0.45.0","example/opencensus/v1.23.0","example/opencensus/v1.23.0-rc.1","example/opencensus/v1.23.1","example/opencensus/v1.24.0","example/opencensus/v1.25.0","example/opencensus/v1.26.0","example/opencensus/v1.27.0","example/opencensus/v1.28.0","example/opencensus/v1.29.0","example/opencensus/v1.30.0","example/opencensus/v1.31.0","example/otel-collector/v1.15.0","example/otel-collector/v1.15.1","example/otel-collector/v1.16.0","example/otel-collector/v1.16.0-rc.1","example/otel-collector/v1.17.0","example/otel-collector/v1.18.0","example/otel-collector/v1.19.0","example/otel-collector/v1.19.0-rc.1","example/otel-collector/v1.20.0","example/otel-collector/v1.21.0","example/otel-collector/v1.22.0","example/otel-collector/v1.23.0","example/otel-collector/v1.23.0-rc.1","example/otel-collector/v1.23.1","example/otel-collector/v1.24.0","example/otel-collector/v1.25.0","example/otel-collector/v1.26.0","example/otel-collector/v1.27.0","example/otel-collector/v1.28.0","example/otel-collector/v1.29.0","example/otel-collector/v1.30.0","example/otel-collector/v1.31.0","example/passthrough/v1.15.0","example/passthrough/v1.15.1","example/passthrough/v1.16.0","example/passthrough/v1.16.0-rc.1","example/passthrough/v1.17.0","example/passthrough/v1.18.0","example/passthrough/v1.19.0","example/passthrough/v1.19.0-rc.1","example/passthrough/v1.20.0","example/passthrough/v1.21.0","example/passthrough/v1.22.0","example/passthrough/v1.23.0","example/passthrough/v1.23.0-rc.1","example/passthrough/v1.23.1","example/passthrough/v1.24.0","example/passthrough/v1.25.0","example/passthrough/v1.26.0","example/passthrough/v1.27.0","example/passthrough/v1.28.0","example/passthrough/v1.29.0","example/passthrough/v1.30.0","example/passthrough/v1.31.0","example/prometheus/v0.38.0","example/prometheus/v0.38.1","example/prometheus/v0.39.0","example/prometheus/v0.39.0-rc.1","example/prometheus/v0.40.0","example/prometheus/v0.41.0","example/prometheus/v0.42.0","example/prometheus/v0.42.0-rc.1","example/prometheus/v0.43.0","example/prometheus/v0.44.0","example/prometheus/v0.45.0","example/prometheus/v0.45.1","example/prometheus/v0.45.2","example/prometheus/v0.46.0","example/prometheus/v0.47.0","example/prometheus/v0.48.0","example/prometheus/v0.49.0","example/prometheus/v0.50.0","example/prometheus/v0.51.0","example/prometheus/v0.52.0","example/prometheus/v0.53.0","example/view/v0.38.0","example/view/v0.38.1","example/view/v0.39.0","example/view/v0.39.0-rc.1","example/view/v0.40.0","example/view/v0.41.0","example/view/v0.42.0","example/view/v0.42.0-rc.1","example/view/v0.43.0","example/zipkin/v1.15.0","example/zipkin/v1.15.1","example/zipkin/v1.16.0","example/zipkin/v1.16.0-rc.1","example/zipkin/v1.17.0","example/zipkin/v1.18.0","example/zipkin/v1.19.0","example/zipkin/v1.19.0-rc.1","example/zipkin/v1.20.0","example/zipkin/v1.21.0","example/zipkin/v1.22.0","example/zipkin/v1.23.0","example/zipkin/v1.23.0-rc.1","example/zipkin/v1.23.1","example/zipkin/v1.24.0","example/zipkin/v1.25.0","example/zipkin/v1.26.0","example/zipkin/v1.27.0","example/zipkin/v1.28.0","example/zipkin/v1.29.0","example/zipkin/v1.30.0","example/zipkin/v1.31.0","exporters/jaeger/v1.15.0","exporters/jaeger/v1.15.1","exporters/jaeger/v1.16.0","exporters/jaeger/v1.16.0-rc.1","exporters/jaeger/v1.17.0","exporters/otlp/internal/retry/v1.15.0","exporters/otlp/internal/retry/v1.15.1","exporters/otlp/internal/retry/v1.16.0","exporters/otlp/internal/retry/v1.16.0-rc.1","exporters/otlp/internal/retry/v1.17.0","exporters/otlp/otlplog/otlploggrpc/v0.10.0","exporters/otlp/otlplog/otlploggrpc/v0.11.0","exporters/otlp/otlplog/otlploggrpc/v0.12.0","exporters/otlp/otlplog/otlploggrpc/v0.12.1","exporters/otlp/otlplog/otlploggrpc/v0.12.2","exporters/otlp/otlplog/otlploggrpc/v0.13.0","exporters/otlp/otlplog/otlploggrpc/v0.14.0","exporters/otlp/otlplog/otlploggrpc/v0.15.0","exporters/otlp/otlplog/otlploggrpc/v0.16.0","exporters/otlp/otlplog/otlploggrpc/v0.17.0","exporters/otlp/otlplog/otlploggrpc/v0.18.0","exporters/otlp/otlplog/otlploggrpc/v0.5.0","exporters/otlp/otlplog/otlploggrpc/v0.6.0","exporters/otlp/otlplog/otlploggrpc/v0.7.0","exporters/otlp/otlplog/otlploggrpc/v0.8.0","exporters/otlp/otlplog/otlploggrpc/v0.9.0","exporters/otlp/otlplog/otlploghttp/v0.10.0","exporters/otlp/otlplog/otlploghttp/v0.11.0","exporters/otlp/otlplog/otlploghttp/v0.12.0","exporters/otlp/otlplog/otlploghttp/v0.12.1","exporters/otlp/otlplog/otlploghttp/v0.12.2","exporters/otlp/otlplog/otlploghttp/v0.13.0","exporters/otlp/otlplog/otlploghttp/v0.14.0","exporters/otlp/otlplog/otlploghttp/v0.15.0","exporters/otlp/otlplog/otlploghttp/v0.16.0","exporters/otlp/otlplog/otlploghttp/v0.17.0","exporters/otlp/otlplog/otlploghttp/v0.18.0","exporters/otlp/otlplog/otlploghttp/v0.2.0-alpha","exporters/otlp/otlplog/otlploghttp/v0.3.0","exporters/otlp/otlplog/otlploghttp/v0.4.0","exporters/otlp/otlplog/otlploghttp/v0.5.0","exporters/otlp/otlplog/otlploghttp/v0.6.0","exporters/otlp/otlplog/otlploghttp/v0.7.0","exporters/otlp/otlplog/otlploghttp/v0.8.0","exporters/otlp/otlplog/otlploghttp/v0.9.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v0.38.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v0.38.1","exporters/otlp/otlpmetric/otlpmetricgrpc/v0.39.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v0.39.0-rc.1","exporters/otlp/otlpmetric/otlpmetricgrpc/v0.40.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v0.41.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v0.42.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v0.42.0-rc.1","exporters/otlp/otlpmetric/otlpmetricgrpc/v0.43.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v0.44.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v0.45.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.23.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.23.0-rc.1","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.23.1","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.24.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.25.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.26.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.27.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.28.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.29.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.30.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.31.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.32.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.33.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.34.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.35.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.36.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.37.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.38.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.39.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.40.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.41.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.42.0","exporters/otlp/otlpmetric/otlpmetrichttp/v0.38.0","exporters/otlp/otlpmetric/otlpmetrichttp/v0.38.1","exporters/otlp/otlpmetric/otlpmetrichttp/v0.39.0","exporters/otlp/otlpmetric/otlpmetrichttp/v0.39.0-rc.1","exporters/otlp/otlpmetric/otlpmetrichttp/v0.40.0","exporters/otlp/otlpmetric/otlpmetrichttp/v0.41.0","exporters/otlp/otlpmetric/otlpmetrichttp/v0.42.0","exporters/otlp/otlpmetric/otlpmetrichttp/v0.42.0-rc.1","exporters/otlp/otlpmetric/otlpmetrichttp/v0.43.0","exporters/otlp/otlpmetric/otlpmetrichttp/v0.44.0","exporters/otlp/otlpmetric/otlpmetrichttp/v0.45.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.23.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.23.0-rc.1","exporters/otlp/otlpmetric/otlpmetrichttp/v1.23.1","exporters/otlp/otlpmetric/otlpmetrichttp/v1.24.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.25.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.26.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.27.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.28.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.29.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.30.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.31.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.32.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.33.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.34.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.35.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.36.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.37.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.38.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.39.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.40.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.41.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.42.0","exporters/otlp/otlpmetric/v0.38.0","exporters/otlp/otlpmetric/v0.38.1","exporters/otlp/otlpmetric/v0.39.0","exporters/otlp/otlpmetric/v0.39.0-rc.1","exporters/otlp/otlpmetric/v0.40.0","exporters/otlp/otlpmetric/v0.41.0","exporters/otlp/otlpmetric/v0.42.0","exporters/otlp/otlpmetric/v0.42.0-rc.1","exporters/otlp/otlpmetric/v0.43.0","exporters/otlp/otlptrace/otlptracegrpc/v1.15.0","exporters/otlp/otlptrace/otlptracegrpc/v1.15.1","exporters/otlp/otlptrace/otlptracegrpc/v1.16.0","exporters/otlp/otlptrace/otlptracegrpc/v1.16.0-rc.1","exporters/otlp/otlptrace/otlptracegrpc/v1.17.0","exporters/otlp/otlptrace/otlptracegrpc/v1.18.0","exporters/otlp/otlptrace/otlptracegrpc/v1.19.0","exporters/otlp/otlptrace/otlptracegrpc/v1.19.0-rc.1","exporters/otlp/otlptrace/otlptracegrpc/v1.20.0","exporters/otlp/otlptrace/otlptracegrpc/v1.21.0","exporters/otlp/otlptrace/otlptracegrpc/v1.22.0","exporters/otlp/otlptrace/otlptracegrpc/v1.23.0","exporters/otlp/otlptrace/otlptracegrpc/v1.23.0-rc.1","exporters/otlp/otlptrace/otlptracegrpc/v1.23.1","exporters/otlp/otlptrace/otlptracegrpc/v1.24.0","exporters/otlp/otlptrace/otlptracegrpc/v1.25.0","exporters/otlp/otlptrace/otlptracegrpc/v1.26.0","exporters/otlp/otlptrace/otlptracegrpc/v1.27.0","exporters/otlp/otlptrace/otlptracegrpc/v1.28.0","exporters/otlp/otlptrace/otlptracegrpc/v1.29.0","exporters/otlp/otlptrace/otlptracegrpc/v1.30.0","exporters/otlp/otlptrace/otlptracegrpc/v1.31.0","exporters/otlp/otlptrace/otlptracegrpc/v1.32.0","exporters/otlp/otlptrace/otlptracegrpc/v1.33.0","exporters/otlp/otlptrace/otlptracegrpc/v1.34.0","exporters/otlp/otlptrace/otlptracegrpc/v1.35.0","exporters/otlp/otlptrace/otlptracegrpc/v1.36.0","exporters/otlp/otlptrace/otlptracegrpc/v1.37.0","exporters/otlp/otlptrace/otlptracegrpc/v1.38.0","exporters/otlp/otlptrace/otlptracegrpc/v1.39.0","exporters/otlp/otlptrace/otlptracegrpc/v1.40.0","exporters/otlp/otlptrace/otlptracegrpc/v1.41.0","exporters/otlp/otlptrace/otlptracegrpc/v1.42.0","exporters/otlp/otlptrace/otlptracehttp/v1.15.0","exporters/otlp/otlptrace/otlptracehttp/v1.15.1","exporters/otlp/otlptrace/otlptracehttp/v1.16.0","exporters/otlp/otlptrace/otlptracehttp/v1.16.0-rc.1","exporters/otlp/otlptrace/otlptracehttp/v1.17.0","exporters/otlp/otlptrace/otlptracehttp/v1.18.0","exporters/otlp/otlptrace/otlptracehttp/v1.19.0","exporters/otlp/otlptrace/otlptracehttp/v1.19.0-rc.1","exporters/otlp/otlptrace/otlptracehttp/v1.20.0","exporters/otlp/otlptrace/otlptracehttp/v1.21.0","exporters/otlp/otlptrace/otlptracehttp/v1.22.0","exporters/otlp/otlptrace/otlptracehttp/v1.23.0","exporters/otlp/otlptrace/otlptracehttp/v1.23.0-rc.1","exporters/otlp/otlptrace/otlptracehttp/v1.23.1","exporters/otlp/otlptrace/otlptracehttp/v1.24.0","exporters/otlp/otlptrace/otlptracehttp/v1.25.0","exporters/otlp/otlptrace/otlptracehttp/v1.26.0","exporters/otlp/otlptrace/otlptracehttp/v1.27.0","exporters/otlp/otlptrace/otlptracehttp/v1.28.0","exporters/otlp/otlptrace/otlptracehttp/v1.29.0","exporters/otlp/otlptrace/otlptracehttp/v1.30.0","exporters/otlp/otlptrace/otlptracehttp/v1.31.0","exporters/otlp/otlptrace/otlptracehttp/v1.32.0","exporters/otlp/otlptrace/otlptracehttp/v1.33.0","exporters/otlp/otlptrace/otlptracehttp/v1.34.0","exporters/otlp/otlptrace/otlptracehttp/v1.35.0","exporters/otlp/otlptrace/otlptracehttp/v1.36.0","exporters/otlp/otlptrace/otlptracehttp/v1.37.0","exporters/otlp/otlptrace/otlptracehttp/v1.38.0","exporters/otlp/otlptrace/otlptracehttp/v1.39.0","exporters/otlp/otlptrace/otlptracehttp/v1.40.0","exporters/otlp/otlptrace/otlptracehttp/v1.41.0","exporters/otlp/otlptrace/otlptracehttp/v1.42.0","exporters/otlp/otlptrace/v1.15.0","exporters/otlp/otlptrace/v1.15.1","exporters/otlp/otlptrace/v1.16.0","exporters/otlp/otlptrace/v1.16.0-rc.1","exporters/otlp/otlptrace/v1.17.0","exporters/otlp/otlptrace/v1.18.0","exporters/otlp/otlptrace/v1.19.0","exporters/otlp/otlptrace/v1.19.0-rc.1","exporters/otlp/otlptrace/v1.20.0","exporters/otlp/otlptrace/v1.21.0","exporters/otlp/otlptrace/v1.22.0","exporters/otlp/otlptrace/v1.23.0","exporters/otlp/otlptrace/v1.23.0-rc.1","exporters/otlp/otlptrace/v1.23.1","exporters/otlp/otlptrace/v1.24.0","exporters/otlp/otlptrace/v1.25.0","exporters/otlp/otlptrace/v1.26.0","exporters/otlp/otlptrace/v1.27.0","exporters/otlp/otlptrace/v1.28.0","exporters/otlp/otlptrace/v1.29.0","exporters/otlp/otlptrace/v1.30.0","exporters/otlp/otlptrace/v1.31.0","exporters/otlp/otlptrace/v1.32.0","exporters/otlp/otlptrace/v1.33.0","exporters/otlp/otlptrace/v1.34.0","exporters/otlp/otlptrace/v1.35.0","exporters/otlp/otlptrace/v1.36.0","exporters/otlp/otlptrace/v1.37.0","exporters/otlp/otlptrace/v1.38.0","exporters/otlp/otlptrace/v1.39.0","exporters/otlp/otlptrace/v1.40.0","exporters/otlp/otlptrace/v1.41.0","exporters/otlp/otlptrace/v1.42.0","exporters/prometheus/v0.38.0","exporters/prometheus/v0.38.1","exporters/prometheus/v0.39.0","exporters/prometheus/v0.39.0-rc.1","exporters/prometheus/v0.40.0","exporters/prometheus/v0.41.0","exporters/prometheus/v0.42.0","exporters/prometheus/v0.42.0-rc.1","exporters/prometheus/v0.43.0","exporters/prometheus/v0.44.0","exporters/prometheus/v0.45.0","exporters/prometheus/v0.45.1","exporters/prometheus/v0.45.2","exporters/prometheus/v0.46.0","exporters/prometheus/v0.47.0","exporters/prometheus/v0.48.0","exporters/prometheus/v0.49.0","exporters/prometheus/v0.50.0","exporters/prometheus/v0.51.0","exporters/prometheus/v0.52.0","exporters/prometheus/v0.53.0","exporters/prometheus/v0.54.0","exporters/prometheus/v0.55.0","exporters/prometheus/v0.56.0","exporters/prometheus/v0.57.0","exporters/prometheus/v0.58.0","exporters/prometheus/v0.59.0","exporters/prometheus/v0.59.1","exporters/prometheus/v0.60.0","exporters/prometheus/v0.61.0","exporters/prometheus/v0.62.0","exporters/prometheus/v0.63.0","exporters/prometheus/v0.64.0","exporters/stdout/stdoutlog/v0.10.0","exporters/stdout/stdoutlog/v0.11.0","exporters/stdout/stdoutlog/v0.12.0","exporters/stdout/stdoutlog/v0.12.1","exporters/stdout/stdoutlog/v0.12.2","exporters/stdout/stdoutlog/v0.13.0","exporters/stdout/stdoutlog/v0.14.0","exporters/stdout/stdoutlog/v0.15.0","exporters/stdout/stdoutlog/v0.16.0","exporters/stdout/stdoutlog/v0.17.0","exporters/stdout/stdoutlog/v0.18.0","exporters/stdout/stdoutlog/v0.2.0-alpha","exporters/stdout/stdoutlog/v0.3.0","exporters/stdout/stdoutlog/v0.4.0","exporters/stdout/stdoutlog/v0.5.0","exporters/stdout/stdoutlog/v0.6.0","exporters/stdout/stdoutlog/v0.7.0","exporters/stdout/stdoutlog/v0.8.0","exporters/stdout/stdoutlog/v0.9.0","exporters/stdout/stdoutmetric/v0.38.0","exporters/stdout/stdoutmetric/v0.38.1","exporters/stdout/stdoutmetric/v0.39.0","exporters/stdout/stdoutmetric/v0.39.0-rc.1","exporters/stdout/stdoutmetric/v0.40.0","exporters/stdout/stdoutmetric/v0.41.0","exporters/stdout/stdoutmetric/v0.42.0","exporters/stdout/stdoutmetric/v0.42.0-rc.1","exporters/stdout/stdoutmetric/v0.43.0","exporters/stdout/stdoutmetric/v0.44.0","exporters/stdout/stdoutmetric/v0.45.0","exporters/stdout/stdoutmetric/v1.23.0","exporters/stdout/stdoutmetric/v1.23.0-rc.1","exporters/stdout/stdoutmetric/v1.23.1","exporters/stdout/stdoutmetric/v1.24.0","exporters/stdout/stdoutmetric/v1.25.0","exporters/stdout/stdoutmetric/v1.26.0","exporters/stdout/stdoutmetric/v1.27.0","exporters/stdout/stdoutmetric/v1.28.0","exporters/stdout/stdoutmetric/v1.29.0","exporters/stdout/stdoutmetric/v1.30.0","exporters/stdout/stdoutmetric/v1.31.0","exporters/stdout/stdoutmetric/v1.32.0","exporters/stdout/stdoutmetric/v1.33.0","exporters/stdout/stdoutmetric/v1.34.0","exporters/stdout/stdoutmetric/v1.35.0","exporters/stdout/stdoutmetric/v1.36.0","exporters/stdout/stdoutmetric/v1.37.0","exporters/stdout/stdoutmetric/v1.38.0","exporters/stdout/stdoutmetric/v1.39.0","exporters/stdout/stdoutmetric/v1.40.0","exporters/stdout/stdoutmetric/v1.41.0","exporters/stdout/stdoutmetric/v1.42.0","exporters/stdout/stdouttrace/v1.15.0","exporters/stdout/stdouttrace/v1.15.1","exporters/stdout/stdouttrace/v1.16.0","exporters/stdout/stdouttrace/v1.16.0-rc.1","exporters/stdout/stdouttrace/v1.17.0","exporters/stdout/stdouttrace/v1.18.0","exporters/stdout/stdouttrace/v1.19.0","exporters/stdout/stdouttrace/v1.19.0-rc.1","exporters/stdout/stdouttrace/v1.20.0","exporters/stdout/stdouttrace/v1.21.0","exporters/stdout/stdouttrace/v1.22.0","exporters/stdout/stdouttrace/v1.23.0","exporters/stdout/stdouttrace/v1.23.0-rc.1","exporters/stdout/stdouttrace/v1.23.1","exporters/stdout/stdouttrace/v1.24.0","exporters/stdout/stdouttrace/v1.25.0","exporters/stdout/stdouttrace/v1.26.0","exporters/stdout/stdouttrace/v1.27.0","exporters/stdout/stdouttrace/v1.28.0","exporters/stdout/stdouttrace/v1.29.0","exporters/stdout/stdouttrace/v1.30.0","exporters/stdout/stdouttrace/v1.31.0","exporters/stdout/stdouttrace/v1.32.0","exporters/stdout/stdouttrace/v1.33.0","exporters/stdout/stdouttrace/v1.34.0","exporters/stdout/stdouttrace/v1.35.0","exporters/stdout/stdouttrace/v1.36.0","exporters/stdout/stdouttrace/v1.37.0","exporters/stdout/stdouttrace/v1.38.0","exporters/stdout/stdouttrace/v1.39.0","exporters/stdout/stdouttrace/v1.40.0","exporters/stdout/stdouttrace/v1.41.0","exporters/stdout/stdouttrace/v1.42.0","exporters/zipkin/v1.15.0","exporters/zipkin/v1.15.1","exporters/zipkin/v1.16.0","exporters/zipkin/v1.16.0-rc.1","exporters/zipkin/v1.17.0","exporters/zipkin/v1.18.0","exporters/zipkin/v1.19.0","exporters/zipkin/v1.19.0-rc.1","exporters/zipkin/v1.20.0","exporters/zipkin/v1.21.0","exporters/zipkin/v1.22.0","exporters/zipkin/v1.23.0","exporters/zipkin/v1.23.0-rc.1","exporters/zipkin/v1.23.1","exporters/zipkin/v1.24.0","exporters/zipkin/v1.25.0","exporters/zipkin/v1.26.0","exporters/zipkin/v1.27.0","exporters/zipkin/v1.28.0","exporters/zipkin/v1.29.0","exporters/zipkin/v1.30.0","exporters/zipkin/v1.31.0","exporters/zipkin/v1.32.0","exporters/zipkin/v1.33.0","exporters/zipkin/v1.34.0","exporters/zipkin/v1.35.0","exporters/zipkin/v1.36.0","exporters/zipkin/v1.37.0","exporters/zipkin/v1.38.0","exporters/zipkin/v1.39.0","exporters/zipkin/v1.40.0","exporters/zipkin/v1.41.0","exporters/zipkin/v1.42.0","log/logtest/v0.13.0","log/logtest/v0.14.0","log/logtest/v0.15.0","log/logtest/v0.16.0","log/logtest/v0.17.0","log/logtest/v0.18.0","log/v0.0.1-alpha","log/v0.1.0-alpha","log/v0.10.0","log/v0.11.0","log/v0.12.0","log/v0.12.1","log/v0.12.2","log/v0.13.0","log/v0.14.0","log/v0.15.0","log/v0.16.0","log/v0.17.0","log/v0.18.0","log/v0.2.0-alpha","log/v0.3.0","log/v0.4.0","log/v0.5.0","log/v0.6.0","log/v0.7.0","log/v0.8.0","log/v0.9.0","metric/v0.38.0","metric/v0.38.1","metric/v1.16.0","metric/v1.16.0-rc.1","metric/v1.17.0","metric/v1.18.0","metric/v1.19.0","metric/v1.19.0-rc.1","metric/v1.20.0","metric/v1.21.0","metric/v1.22.0","metric/v1.23.0","metric/v1.23.0-rc.1","metric/v1.23.1","metric/v1.24.0","metric/v1.25.0","metric/v1.26.0","metric/v1.27.0","metric/v1.28.0","metric/v1.29.0","metric/v1.30.0","metric/v1.31.0","metric/v1.32.0","metric/v1.33.0","metric/v1.34.0","metric/v1.35.0","metric/v1.36.0","metric/v1.37.0","metric/v1.38.0","metric/v1.39.0","metric/v1.40.0","metric/v1.41.0","metric/v1.42.0","schema/v0.0.10","schema/v0.0.11","schema/v0.0.12","schema/v0.0.13","schema/v0.0.14","schema/v0.0.15","schema/v0.0.16","schema/v0.0.5","schema/v0.0.6","schema/v0.0.7","schema/v0.0.8","schema/v0.0.9","sdk/log/logtest/v0.13.0","sdk/log/logtest/v0.14.0","sdk/log/logtest/v0.15.0","sdk/log/logtest/v0.16.0","sdk/log/logtest/v0.17.0","sdk/log/logtest/v0.18.0","sdk/log/v0.10.0","sdk/log/v0.11.0","sdk/log/v0.12.0","sdk/log/v0.12.1","sdk/log/v0.12.2","sdk/log/v0.13.0","sdk/log/v0.14.0","sdk/log/v0.15.0","sdk/log/v0.16.0","sdk/log/v0.17.0","sdk/log/v0.18.0","sdk/log/v0.2.0-alpha","sdk/log/v0.3.0","sdk/log/v0.4.0","sdk/log/v0.5.0","sdk/log/v0.6.0","sdk/log/v0.7.0","sdk/log/v0.8.0","sdk/log/v0.9.0","sdk/metric/v0.38.0","sdk/metric/v0.38.1","sdk/metric/v0.39.0","sdk/metric/v0.39.0-rc.1","sdk/metric/v0.40.0","sdk/metric/v0.41.0","sdk/metric/v1.19.0","sdk/metric/v1.19.0-rc.1","sdk/metric/v1.20.0","sdk/metric/v1.21.0","sdk/metric/v1.22.0","sdk/metric/v1.23.0","sdk/metric/v1.23.0-rc.1","sdk/metric/v1.23.1","sdk/metric/v1.24.0","sdk/metric/v1.25.0","sdk/metric/v1.26.0","sdk/metric/v1.27.0","sdk/metric/v1.28.0","sdk/metric/v1.29.0","sdk/metric/v1.30.0","sdk/metric/v1.31.0","sdk/metric/v1.32.0","sdk/metric/v1.33.0","sdk/metric/v1.34.0","sdk/metric/v1.35.0","sdk/metric/v1.36.0","sdk/metric/v1.37.0","sdk/metric/v1.38.0","sdk/metric/v1.39.0","sdk/metric/v1.40.0","sdk/metric/v1.41.0","sdk/metric/v1.42.0","sdk/v1.15.0","sdk/v1.15.1","sdk/v1.16.0","sdk/v1.16.0-rc.1","sdk/v1.17.0","sdk/v1.18.0","sdk/v1.19.0","sdk/v1.19.0-rc.1","sdk/v1.20.0","sdk/v1.21.0","sdk/v1.22.0","sdk/v1.23.0","sdk/v1.23.0-rc.1","sdk/v1.23.1","sdk/v1.24.0","sdk/v1.25.0","sdk/v1.26.0","sdk/v1.27.0","sdk/v1.28.0","sdk/v1.29.0","sdk/v1.30.0","sdk/v1.31.0","sdk/v1.32.0","sdk/v1.33.0","sdk/v1.34.0","sdk/v1.35.0","sdk/v1.36.0","sdk/v1.37.0","sdk/v1.38.0","sdk/v1.39.0","sdk/v1.40.0","sdk/v1.41.0","sdk/v1.42.0","trace/v1.15.0","trace/v1.15.1","trace/v1.16.0","trace/v1.16.0-rc.1","trace/v1.17.0","trace/v1.18.0","trace/v1.19.0","trace/v1.19.0-rc.1","trace/v1.20.0","trace/v1.21.0","trace/v1.22.0","trace/v1.23.0","trace/v1.23.0-rc.1","trace/v1.23.1","trace/v1.24.0","trace/v1.25.0","trace/v1.26.0","trace/v1.27.0","trace/v1.28.0","trace/v1.29.0","trace/v1.30.0","trace/v1.31.0","trace/v1.32.0","trace/v1.33.0","trace/v1.34.0","trace/v1.35.0","trace/v1.36.0","trace/v1.37.0","trace/v1.38.0","trace/v1.39.0","trace/v1.40.0","trace/v1.41.0","trace/v1.42.0","v1.15.0","v1.15.1","v1.16.0","v1.16.0-rc.1","v1.17.0","v1.18.0","v1.19.0","v1.19.0-rc.1","v1.20.0","v1.21.0","v1.22.0","v1.23.0","v1.23.0-rc.1","v1.23.1","v1.24.0","v1.25.0","v1.26.0","v1.27.0","v1.28.0","v1.29.0","v1.30.0","v1.31.0","v1.32.0","v1.33.0","v1.34.0","v1.35.0","v1.36.0","v1.37.0","v1.38.0","v1.39.0","v1.40.0","v1.41.0","v1.42.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-39883.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}]}