Go/github.com/grafana/tempo CVE-2026-21728: high 7.5, EPSS 0.64%

Grafana Tempo has an Uncontrolled Resource Consumption issue

Action: Upgrade github.com/grafana/tempo to 2.8.4 or later.

go get github.com/grafana/tempo@v2.8.4

go get github.com/grafana/tempo@v2.9.2

go get github.com/grafana/tempo@v2.10.2

Affected

Fixed versions

Sources

• osv: GHSA-p4r4-xvrq-gvmc
• https://nvd.nist.gov/vuln/detail/CVE-2026-21728
• https://github.com/grafana/tempo/pull/6525
• https://github.com/grafana/tempo/commit/650eb1985a0776789c8564122990f588a742356f
• https://github.com/grafana/tempo
• https://github.com/grafana/tempo/blob/4dc3e5b0d3463a0b67498b662b85a148698b4afd/docs/sources/tempo/release-notes/version-2/v2-10.md?plain=1#L328
• https://github.com/grafana/tempo/blob/4dc3e5b0d3463a0b67498b662b85a148698b4afd/docs/sources/tempo/release-notes/version-2/v2-8.md?plain=1#L251
• https://github.com/grafana/tempo/blob/4dc3e5b0d3463a0b67498b662b85a148698b4afd/docs/sources/tempo/release-notes/version-2/v2-9.md?plain=1#L224
• https://grafana.com/security/security-advisories/cve-2026-21728

CVE-2026-21728 · published 2026-04-24T09:30:30Z · modified 2026-09-10T03:50:44.808071031Z · JSON