CVE-2025-11065Medium 5.3Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure0.5%
CVE-2025-2842Medium 4.3Tempo-operator: tempo operator token exposition lead to read sensitive data0.4%
CVE-2025-2786Medium 4.3Tempo-operator: serviceaccount token exposure leading to token and subject access reviews in openshift tempo operator0.4%
CVE-2024-5037High 7.5Openshift/telemeter: iss check during jwt authentication can be bypassed0.8%