CVE-2025-2786
2 advisories.
Go/github.com/grafana/tempo-operator CVE-2025-2786: medium 4.3, EPSS 0.37%
Grafana Tempo Operator Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Action: Upgrade github.com/grafana/tempo-operator to 0.16.0 or later.
go get github.com/grafana/tempo-operator@v0.16.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.16.0 | - |
Fixed versions
| 0.16.0 |
Sources
- osv: GHSA-28gr-56hr-prp6
- https://nvd.nist.gov/vuln/detail/CVE-2025-2786
- https://github.com/grafana/tempo-operator/pull/1145
- https://github.com/grafana/tempo-operator/commit/0f3f6ad9dec457d67c3d45ceec90e8dfa017329c
- https://access.redhat.com/errata/RHSA-2025:3607
- https://access.redhat.com/errata/RHSA-2025:3740
- https://access.redhat.com/security/cve/CVE-2025-2786
- https://bugzilla.redhat.com/show_bug.cgi?id=2354811
- https://github.com/grafana/tempo-operator
CVE-2025-2786 · published · modified · JSON
Go/github.com/grafana/tempo-operator CVE-2025-2786: unknown, EPSS 0.37%
Grafana Tempo Operator Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in github.com/grafana/tempo-operator
Action: Upgrade github.com/grafana/tempo-operator to 0.16.0 or later.
go get github.com/grafana/tempo-operator@v0.16.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.16.0 | - |
Fixed versions
| 0.16.0 |
Sources
- osv: GO-2026-4996
- https://github.com/advisories/GHSA-28gr-56hr-prp6
- https://nvd.nist.gov/vuln/detail/CVE-2025-2786
- https://github.com/grafana/tempo-operator/commit/0f3f6ad9dec457d67c3d45ceec90e8dfa017329c
- https://github.com/grafana/tempo-operator/pull/1145
- https://access.redhat.com/errata/RHSA-2025:3607
- https://access.redhat.com/errata/RHSA-2025:3740
- https://access.redhat.com/security/cve/CVE-2025-2786
- https://bugzilla.redhat.com/show_bug.cgi?id=2354811
CVE-2025-2786 · published · modified · JSON