github.com/grafana/tempo vulnerabilities (Go)

3 vulnerabilities.

• github.com/grafana/tempo Go Tempo TraceQL query with exemplar hint could result in unbounded memory usage CVE-2026-27878 Fix available 6.5 MediumJune 19, 2026
• github.com/grafana/tempo Go Tempo query limit results in unbounded memory allocation CVE-2026-21728 Fix available 7.5 HighApril 24, 2026
• github.com/grafana/tempo Go S3 SSE-C Encryption Key Exposed in Plaintext via Config Endpoint (CVE-2025-41118 Pattern) CVE-2026-28377 Fix available 7.5 HighMarch 18, 2026