{"api_version":"v1","generated_at":"2026-10-09T11:15:00+00:00","product":{"cve_count":2,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-grafana-tempo-b17a3705ae13","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"Tempo","next_cursor":null,"observations":[{"affected":"Tempo: 1.3.0 \u2264 2.8.3, 2.9.0 \u2264 2.9.1, 2.10.0 \u2264 2.10.1; Enterprise Traces (GET): 1.0.0 \u2264 2.8.7","affected_versions_present":true,"cve_id":"CVE-2026-21728","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-21728","fixed":"RHSA-2026:22423: Multicluster Global Hub 1.3.4","last_modified":"2026-09-09T12:04:42.986Z","patch_url":"https://grafana.com/security/security-advisories/cve-2026-21728","primary_source":"","published":"2026-04-24T08:00:47.074Z"},{"affected":"2.10.3","affected_versions_present":true,"cve_id":"CVE-2026-28377","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28377","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-27T17:22:34.956Z","patch_url":"","primary_source":"","published":"2026-03-26T21:39:46.928Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Grafana"}}