298 matches found
CVE-2026-73136 Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay
Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated third party to obtain paid resources by replaying a transfer settled by an unrelated payer. MPP.Methods.Tempo normally binds a settled TIP-20 TransferWithMemo to the specific challenge under verification through an...
GO-2024-2900 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, opentelemetry-collector-fips, opentelemetry-collector...
GO-2024-2911 vulnerabilities
Vulnerabilities for packages: spicedb, opentelemetry-collector-contrib, opentelemetry-collector, opentelemetry-collector-contrib-fips, opentelemetry-collector-fips...
GO-2024-2911 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, opentelemetry-collector-contrib, spicedb...
GO-2024-2900 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, opentelemetry-collector-contrib...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, dagger, malcontent, teleport, maru, grafana, nfpm, loki, opentelemetry-collector, gitlab-runner, weaviate, goreleaser, ollama, mcp-grafana, vcluster, kubevela, k8sgpt, eksctl, datadog-agent, k3s, minio, grafana-alloy, prometheus,...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, cilium-cli, kargo, dagger, cert-manager-cmctl, sops, step-ca, cloudnative-pg, zot, dbmate, opa, kots, pulumi-language-dotnet, trivy, rqlite, dex, opentelemetry-collector, grafana-mimir, guac, k3d, terraform-provider-google,...
GO-2026-5662 vulnerabilities
Vulnerabilities for packages: cloud-sql-proxy, trillian, loki, telegraf, mcp-grafana, splunk-otel-collector, karma, aws-otel-collector, istio, minio-operator, prometheus-pushgateway, minio-object-browser, jaeger, datadog-agent, minio, grafana-pyroscope, mc, tempo, keda, certificate-transparency...
GO-2025-3525 vulnerabilities
Vulnerabilities for packages: argo-workflows, opentelemetry-collector-contrib, kargo, opentelemetry-collector, grafana-alloy, kubeflow-pipelines, amazon-cloudwatch-agent, nats, splunk-otel-collector, argo-rollouts, k8sgpt...
GO-2026-5264 vulnerabilities
Vulnerabilities for packages: cloud-sql-proxy, trillian, metrics-server, grafana, loki, opentelemetry-collector, certificate-transparency, amazon-cloudwatch-agent-operator, karma, aws-otel-collector, istio, minio-operator, splunk-otel-collector, k8sgpt, prometheus-pushgateway, jaeger,...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, flux-image-reflector-controller, sops, timestamp-authority, cosign, flux-kustomize-controller, step-ca, py3-azure-identity, argo-events, zot, up, flyte, falcoctl, trivy, opentelemetry-collector, grafana-mimir, guac, thanos,...
GO-2026-4985 vulnerabilities
Vulnerabilities for packages: opentelemetry-operator, kubo, cilium, amazon-cloudwatch-agent, net-kourier, zot, flyte, grafana-rollout-operator, octo-sts, grafana-mimir, kubeflow-pipelines, weaviate, tkn, external-secrets-operator, headlamp, envoy-gateway, prometheus-alertmanager, bento, spicedb,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: polaris, lazydocker, ipfs-cluster, nri-mysql, argo-events, zot, nodetaint, grafana-rollout-operator, falcoctl, trivy, ip-masq-agent, kuberlr, docker-credential-gcr, tkn, yunikorn-k8shim, headlamp, helm-set-status, eksctl, cloud-provider-gcp-cloud-controller-manager,...
CLEANSTART-2026-ZT61417 Security fixes in tempo 2.10.4-r1
Package tempo version 2.10.4-r1 fixes 32 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39832...
CLEANSTART-2026-OS37166 Security fixes in tempo-fips 3.0.2-r2
Package tempo-fips version 3.0.2-r2 fixes 1 vulnerabilities: CVE-2026-41178...
CLEANSTART-2026-FT67124 Security fixes in tempo 2.7.2-r0
Package tempo version 2.7.2-r0 fixes 9 vulnerabilities: CVE-2026-33186, CVE-2026-32287, CVE-2026-24051, CVE-2025-22868, CVE-2025-30204...
CLEANSTART-2026-QR90423 Security fixes in tempo-fips 2.9.1-r1
Package tempo-fips version 2.9.1-r1 fixes 2 vulnerabilities: CVE-2026-34986, CVE-2026-32285...
CLEANSTART-2026-AY71406 Security fixes in tempo-fips 2.9.1-r0
Package tempo-fips version 2.9.1-r0 fixes 20 vulnerabilities: CVE-2026-33186, CVE-2025-47914, CVE-2025-58181, CVE-2025-47913, CVE-2026-32287...