tempo-operator

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-2842< 0.15.3Tempo-operator: tempo operator token exposition lead to read sensitive dataMEDIUM 4.30.4 %
CVE-2025-2786< 0.15.3Tempo-operator: serviceaccount token exposure leading to token and subject access reviews in openshift tempo operatorMEDIUM 4.30.4 %