CLEANSTART-2026-MG71549: Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D lan...
Published Nov 5, 2026
·Updated
Security vulnerability affects the tempo package. Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings.
Affected Software
3 affected componentsFixes available
cleanstart/tempo<2.10.10-r0
2.10.10-r0
cleanstart/tempo<3.1.1-r1
3.1.1-r1
cleanstart/tempo<3.0.5-r1
3.0.5-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/tempoto a version that resolves this vulnerability.Fixed in 2.10.10-r0 - Upgrade
Upgrade
cleanstart/tempoto a version that resolves this vulnerability.Fixed in 3.1.1-r1 - Upgrade
Upgrade
cleanstart/tempoto a version that resolves this vulnerability.Fixed in 3.0.5-r1
Event History
Nov 5, 2026
Advisory Published
via OSV·12:36 AM
Data Sourced
via OSV·12:36 AM
DescriptionSeverityAffected Software