CLEANSTART-2026-NJ93405: Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy

Q: Who can exploit this issue?

An unauthenticated remote attacker can exploit it by submitting Tempo queries with large limits. No user interaction or prior privileges are required.

Q: What is the primary impact?

Large query limits can trigger large memory allocations and reduce service availability. The extent of the impact depends on the deployment strategy.

Q: How can I tell whether my deployment is exposed?

Review whether the affected cleanstart/grafana deployment accepts Tempo queries and whether callers can submit queries with large limits. The provided data does not identify affected versions or a detection method.

Published Nov 3, 2026

Updated

Security vulnerability affects the grafana package. Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.

Affected Software

1 affected componentFixes available

cleanstart/grafana<13.1.9-r0

13.1.9-r0

Event History

Nov 3, 2026

Advisory Published

via OSV·12:36 AM

Data Sourced

via OSV·12:36 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-21728

Frequently Asked Questions

Who can exploit this issue?

An unauthenticated remote attacker can exploit it by submitting Tempo queries with large limits. No user interaction or prior privileges are required.

What is the primary impact?

Large query limits can trigger large memory allocations and reduce service availability. The extent of the impact depends on the deployment strategy.

How can I tell whether my deployment is exposed?

Review whether the affected cleanstart/grafana deployment accepts Tempo queries and whether callers can submit queries with large limits. The provided data does not identify affected versions or a detection method.

CLEANSTART-2026-NJ93405: Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What is the primary impact?

How can I tell whether my deployment is exposed?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the primary impact?

How can I tell whether my deployment is exposed?