https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:14:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-06943 bdu:2026-06943 https://cve.radiocsirt.org/vuln/bdu:2026-06943 https://cve.radiocsirt.org/vuln/cleanstart-2026-ft67124 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: tempo</p> <p>Package tempo version 2.7.2-r0 fixes 9 vulnerabilities: CVE-2026-33186, CVE-2026-32287, CVE-2026-24051, CVE-2025-22868, CVE-2025-30204...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: tempo</p> <p>Package tempo version 2.7.2-r0 fixes 9 vulnerabilities: CVE-2026-33186, CVE-2026-32287, CVE-2026-24051, CVE-2025-22868, CVE-2025-30204...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ft67124 https://cve.radiocsirt.org/vuln/euvd-2026-360210 EUVD-2026-360210 https://cve.radiocsirt.org/vuln/euvd-2026-360210 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28377 <p>A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3.</p> <p>Thanks to william_goodfellow for reporting this vulnerability.</p> <p>A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3.</p> <p>Thanks to william_goodfellow for reporting this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-28377 https://cve.radiocsirt.org/vuln/ghsa-ffqx-q65f-36jf <p><strong>Affected:</strong> Go: github.com/grafana/tempo</p> <p>A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3.</p> <p><strong>Affected:</strong> Go: github.com/grafana/tempo</p> <p>A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3.</p> https://cve.radiocsirt.org/vuln/ghsa-ffqx-q65f-36jf https://cve.radiocsirt.org/vuln/opensuse-su-2026:10390-1 <p>tempo-cli-2.10.3-1.1 on GA media</p> <p>tempo-cli-2.10.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10390-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0764 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Grafana Tempo ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Grafana Tempo ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0764