GHSA-Q98V-9F9W-F49Q vulnerabilities

Vulnerabilities for packages: temporal-server, temporal-fips, temporal-server-fips...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: temporal, fq, snyk-cli, temporal-ui-server, kube-metrics-adapter...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: temporal, fq, snyk-cli, temporal-ui-server, kube-metrics-adapter...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: gotenberg, kube-metrics-adapter, temporal-ui-server-fips, temporal, kube-metrics-adapter-fips, snyk-cli, temporal-ui-server, fq, temporal-fips...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: gotenberg, kube-metrics-adapter, temporal-ui-server-fips, temporal, kube-metrics-adapter-fips, snyk-cli, temporal-ui-server, fq, temporal-fips...

CLEANSTART-2026-YY57430 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the temporal-server-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

GHSA-XPG8-3HHP-P7W8 vulnerabilities

Vulnerabilities for packages: temporal...

CVE-2026-5199 vulnerabilities

Vulnerabilities for packages: temporal...

Robust Semi-Supervised Temporal Intrusion Detection for Adversarial Cloud Networks

Cloud networks increasingly rely on machine learning based Network Intrusion Detection Systems to defend against evolving cyber threats. However, real-world deployments are challenged by limited labeled data, non-stationary traffic, and adaptive adversaries. While semi-supervised learning can...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: mongo-tools, kubectx, crossplane-function-environment-configs, eks-node-monitoring-agent, clickhouse-operator, nri-discovery-kubernetes, conftest-fips, pvc-autoresizer, terraform-provider-tls-fips, db-operator, terraform-provider-azapi, crossplane-provider-aws-s3-fip...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: crossplane-function-environment-configs, terraform-provider-azapi, amazon-cloudwatch-agent-operator, cloudflared-fips, yace, docker-cli-buildx, authservice, grafana-pyroscope, spicedb-operator, aws-eks-pod-identity-agent, prometheus-snmp-exporter, spilo,...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the AdminService/StreamWorkflowReplicationMessages endpoint. An attacker can access replication streams and exfiltrate data by connecting to the frontend gRPC server without providing...

EUVD-2026-21607

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

GHSA-Q98V-9F9W-F49Q Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

CVE-2026-5724

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

CVE-2026-5724

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

CVE-2026-5724 Missing Authentication on Streaming gRPC Replication Endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

CVE-2026-5724 Missing Authentication on Streaming gRPC Replication Endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

PT-2026-32045

Name of the Vulnerable Software and Affected Versions Temporal versions affected versions not specified Description The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce...