Threats tagged 'ghsa-p4r4-xvrq-gvmc'

Grafana Tempo versions 1.3.0 through before 2.8.4, 2.9.0 through before 2.9.2, and 2.10.0 through before 2.10.2 contain an uncontrolled resource consumption vulnerability. Queries with large limits can cause excessive memory allocation, potentially impacting service availability. A fix is available in versions 2.8.4, 2.9.2, and 2.10.2. Mitigation includes configuring max_result_limit to restrict query size.