Lucene search
+L

CVE-2026-65651

🗓️ 21 Sep 2026 11:34:05Reported by TemporalType 
cve
 cve
🔗 web.nvd.nist.gov👁 31 Views🌐 WEB

Authenticated DoS in temporalio/sqlparser via deeply nested unary expressions causing stack overflow.

Related
Affected
Refs
Paths
[
  {
    "vendor": "Temporal Technologies, Inc.",
    "product": "temporalio/sqlparser",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "github.com/temporalio/sqlparser",
    "repo": "https://github.com/temporalio/sqlparser",
    "modules": [
      "AST",
      "Parser"
    ],
    "programFiles": [
      "ast.go",
      "sql.y"
    ],
    "programRoutines": [
      {
        "name": "Parse"
      },
      {
        "name": "ParseStrictDDL"
      },
      {
        "name": "ParseNext"
      },
      {
        "name": "String"
      },
      {
        "name": "Walk"
      },
      {
        "name": "UnaryExpr.Format"
      }
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0.0.0-20141206041240-1aae9baceee8",
        "lessThan": "0.0.0-20260721183058-0466b6b405ac",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Temporal Technologies, Inc.",
    "product": "Temporal Server",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "go.temporal.io/server",
    "repo": "https://github.com/temporalio/temporal",
    "modules": [
      "Archival",
      "Frontend",
      "Matching",
      "Visibility"
    ],
    "programFiles": [
      "common/archiver/filestore/queryParser.go",
      "common/persistence/visibility/store/query/converter.go",
      "common/persistence/visibility/store/sql/query_converter.go",
      "service/matching/workers/worker_query_engine.go"
    ],
    "programRoutines": [
      {
        "name": "queryParser.convertComparisonExpr"
      },
      {
        "name": "QueryConverter.convertComparisonExpr"
      },
      {
        "name": "comparisonExprConverter.Convert"
      },
      {
        "name": "workerQueryEngine.evaluateComparison"
      }
    ],
    "versions": [
      {
        "status": "unknown",
        "version": "0.0.0",
        "lessThan": "0.10.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "0.10.0",
        "lessThanOrEqual": "1.29.7",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "1.30.0",
        "lessThan": "1.30.7",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "1.31.0",
        "lessThan": "1.31.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:a:temporal:temporal:*:*:*:*:*:*:*:*"
    ]
  }
]
ParameterPositionPathDescriptionCWE
queryrequest body/archivalThe Temporal Server passes caller-controlled query input through the affected parser in the archival path, which can lead to a stack overflow.CWE-674
queryrequest body/visibilityThe Temporal Server passes caller-controlled query input through the affected parser in the visibility path, which can lead to a stack overflow.CWE-674
queryrequest body/worker-queryThe Temporal Server passes caller-controlled query input through the affected parser in the worker-query path, which can lead to a stack overflow.CWE-674
queryrequest body/ListWorkersThe ListWorkers route (requiring at least one retained worker heartbeat) passes caller-controlled query input through the affected parser, which can lead to a stack overflow.CWE-674

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

22 Sep 2026 19:40Current
5.9Medium risk
Vulners AI Score5.9
CVSS 48.7
EPSS0.00672
SSVC
31