CVE-2025-8396

Insufficiently specific bounds checking on authorization header could lead to denial of service in the Temporal server on all platforms due to excessive memory allocation.This issue affects all platforms and versions of OSS Server prior to 1.26.3, 1.27.3, and 1.28.1 i.e., fixed in 1.26.3, 1.27.3,...

PT-2025-37567

Name of the Vulnerable Software and Affected Versions Temporal Server versions prior to 1.26.3 Temporal Server versions prior to 1.27.3 Temporal Server versions prior to 1.28.1 Description Insufficiently specific bounds checking on the authorization header could lead to denial of service in the...

CVE-2025-8396: Allocation of Resources Without Limits or Throttling

Insufficiently specific bounds checking on authorization header could lead to denial of service in the Temporal server on all platforms due to excessive memory allocation.This issue affects all platforms and versions of OSS Server prior to 1.26.3, 1.27.3, and 1.28.1 i.e., fixed in 1.26.3, 1.27.3,...

GO-2024-2689 Temporal Server Denial of Service in go.temporal.io/server

Temporal Server Denial of Service in go.temporal.io/server...

Denial Of Service (DoS)

Temporal Server is vulnerable to Denial of Service DoS. The vulnerability is caused by an authenticated user with permissions to interact with workflows submitting an invalid UTF-8 string which causes an application crash. This can lead to stuck tasks in the queue, increased queue lag, resource...

Temporal Server Denial of Service

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

GHSA-WMXC-V39R-P9WF Temporal Server Denial of Service

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

CVE-2024-2689

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

CVE-2024-2689 Denial of Service if invalid UTF-8 sent

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

CVE-2024-2689 Denial of Service if invalid UTF-8 sent

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

CVE-2024-2689

Summary: CVE-2024-2689 is a Temporal Server DoS affecting versions 1.20.5, 1.21.6 and 1.22.7 where an authenticated user with workflow permissions can submit an invalid UTF-8 string to trigger a crashloop, causing queue lag and eventual resource exhaustion. The logs may reveal the failing workflo...

CVE-2024-2689 Denial of Service if invalid UTF-8 sent

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

CVE-2024-2689: Improper Input Validation

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

Temporal Server 安全漏洞

Temporal Server is a microservices orchestration platform from Temporal. A security vulnerability exists in Temporal Server versions prior to 1.20.5, 1.21.6, and 1.22.7, which stems from a vulnerability that allows an attacker to interact with a workflow and craft invalid UTF-8 strings for...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: kine, wavefront-collector-for-kubernetes, ferretdb, amass, caddy-fips, falcosidekick-fips, k3s, src, argo-workflows, trillian, step-ca, caddy, step, trillian-fips, spicedb, argo-workflows-fips, kube-bench-fips, kots, kube-bench, temporal-server-fips, temporal-server...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: temporal-server, trillian, spicedb, kube-bench, kine, argo-workflows, src, caddy, amass, k3s, step-ca, step, ferretdb, kots...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, crossplane-provider-aws-rds, conftest-fips, metrics-server-fips, pulumi-language-dotnet, node-problem-detector, gitsign, k8sgpt, crossplane-provider-azure, metrics-server, step-ca, nats, nri-kubernetes, terraform-provider-google, tflint,...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: temporal-server, trillian, spicedb, kube-bench, kine, argo-workflows, src, caddy, amass, k3s, step-ca, step, ferretdb, kots...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: kine, wavefront-collector-for-kubernetes, ferretdb, amass, caddy-fips, falcosidekick-fips, k3s, src, argo-workflows, trillian, step-ca, caddy, step, trillian-fips, spicedb, argo-workflows-fips, kube-bench-fips, kots, kube-bench, temporal-server-fips, temporal-server...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: kine, wavefront-collector-for-kubernetes, ferretdb, amass, caddy-fips, falcosidekick-fips, k3s, src, argo-workflows, trillian, step-ca, caddy, step, trillian-fips, spicedb, argo-workflows-fips, kube-bench-fips, kots, kube-bench, temporal-server-fips, temporal-server...