CVE-2026-27878 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-27878 vulnerabilities

Vulnerabilities for packages: commercial-grafana, grafana-fips, grafana...

CVE-2026-27878

Grafana Tempo is affected by CVE-2026-27878 due to a TraceQL query that uses a large exemplars hint value, which can cause the Tempo instance to allocate excessive memory and crash (out-of-memory) for an authenticated user, enabling a denial of service. The public documents describe the issue and...