GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: snyk-cli, temporal, kube-metrics-adapter, temporal-ui-server, fq...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: snyk-cli, temporal, kube-metrics-adapter, temporal-ui-server, fq...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, temporal-fips, snyk-cli, fq, temporal-ui-server-fips, kube-metrics-adapter-fips, gotenberg, temporal, temporal-ui-server...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, temporal-fips, snyk-cli, fq, temporal-ui-server-fips, kube-metrics-adapter-fips, gotenberg, temporal, temporal-ui-server...

CLEANSTART-2026-YY57430 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the temporal-server-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

GHSA-XPG8-3HHP-P7W8 vulnerabilities

Vulnerabilities for packages: temporal...

CVE-2026-5199 vulnerabilities

Vulnerabilities for packages: temporal...

Robust Semi-Supervised Temporal Intrusion Detection for Adversarial Cloud Networks

Cloud networks increasingly rely on machine learning based Network Intrusion Detection Systems to defend against evolving cyber threats. However, real-world deployments are challenged by limited labeled data, non-stationary traffic, and adaptive adversaries. While semi-supervised learning can...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, terraform-provider-databricks-fips, aws-sigv4-proxy, kubernetes-dashboard-auth, virt-controller, crossplane-provider-aws-acm, kubernetes-secret-generator, tekton-pipelines, crossplane-provider-aws-kinesis-fips, etcd-fips, chronyexporter-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: terraform-provider-databricks-fips, virt-controller, kubernetes-secret-generator, chronyexporter-fips, nri-nginx-fips, grafana-agent-operator, velero-plugin-for-aws-fips, zot, lvm-driver, chart-testing-fips, gomplate-fips, aws-flb-cloudwatch-fips, kubescape-server,...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the AdminService/StreamWorkflowReplicationMessages endpoint. An attacker can access replication streams and exfiltrate data by connecting to the frontend gRPC server without providing...

GHSA-Q98V-9F9W-F49Q Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

EUVD-2026-21607

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

CVE-2026-5724

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

CVE-2026-5724

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

CVE-2026-5724 Missing Authentication on Streaming gRPC Replication Endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

CVE-2026-5724 Missing Authentication on Streaming gRPC Replication Endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

PT-2026-32045

Name of the Vulnerable Software and Affected Versions Temporal versions affected versions not specified Description The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce...

Temporal 安全漏洞

Temporal is an open-source persistence execution platform developed by temporal.io. There is a security vulnerability in temporal, which stems from the fact that the streaming interceptor chain of the frontend gRPC server does not include an authorization interceptor. As a result, when configurin...