https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:59:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-09518 bdu:2026-09518 https://cve.radiocsirt.org/vuln/bdu:2026-09518 https://cve.radiocsirt.org/vuln/cleanstart-2026-gx27419 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: grafana</p> <p>Multiple security vulnerabilities affect the grafana package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: grafana</p> <p>Multiple security vulnerabilities affect the grafana package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-gx27419 https://cve.radiocsirt.org/vuln/euvd-2026-365457 EUVD-2026-365457 https://cve.radiocsirt.org/vuln/euvd-2026-365457 https://cve.radiocsirt.org/vuln/fkie_cve-2026-21728 <p>Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.</p> <p>Mitigation can be done by setting max_result_limit in the search config, e.g. to 262144 (2^18). Alternatively, automatically restart the service.</p> <p>Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.</p> <p>Mitigation can be done by setting max_result_limit in the search config, e.g. to 262144 (2^18). Alternatively, automatically restart the service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-21728 https://cve.radiocsirt.org/vuln/ghsa-p4r4-xvrq-gvmc <p><strong>Affected:</strong> Go: github.com/grafana/tempo</p> <p>Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.</p> <p>Mitigation can be done by setting max_result_limit in the search config, e.g. to 262144 (2^18).</p> <p><strong>Affected:</strong> Go: github.com/grafana/tempo</p> <p>Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.</p> <p>Mitigation can be done by setting max_result_limit in the search config, e.g. to 262144 (2^18).</p> https://cve.radiocsirt.org/vuln/ghsa-p4r4-xvrq-gvmc https://cve.radiocsirt.org/vuln/rhsa-2026:21769 <p>grafana/tempo: Tempo: Denial of Service via large queries net/url: Incorrect parsing of IPv6 host literals in net/url crypto/x509: Incorrect enforcement of email constraints in crypto/x509 github.com/nats-io/nats-server: NATS-Server: Denial of Service via malformed WebSockets frame github.com/nats-io/nats-server: NATS-Server: Denial of Service via leafnode compression crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation nats-server: NATS-Server: Session and message hijacking via MQTT Client ID malfeasance nats-server: github.com/nats-io/nats-server: NATS-Server: Information disclosure of MQTT passwords through monitoring endpoints nats-server: github.com/nats-io/nats-server: NATS-Server: Access control bypass via unapplied ACLs in MQTT namespace nats-server: github.com/nats-io/nats-server: NATS-Server: Denial of Service via mal…</p> <p>grafana/tempo: Tempo: Denial of Service via large queries net/url: Incorrect parsing of IPv6 host literals in net/url crypto/x509: Incorrect enforcement of email constraints in crypto/x509 github.com/nats-io/nats-server: NATS-Server: Denial of Service via malformed WebSockets frame github.com/nats-io/nats-server: NATS-Server: Denial of Service via leafnode compression crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation nats-server: NATS-Server: Session and message hijacking via MQTT Client ID malfeasance nats-server: github.com/nats-io/nats-server: NATS-Server: Information disclosure of MQTT passwords through monitoring endpoints nats-server: github.com/nats-io/nats-server: NATS-Server: Access control bypass via unapplied ACLs in MQTT namespace nats-server: github.com/nats-io/nats-server: NATS-Server: Denial of Service via mal…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:21769 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2342 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Grafana Tempo ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Grafana Tempo ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2342