CLEANSTART-2026-AD26676 Security fixes in temporal-ui-server-fips 2.50.1-r1

Package temporal-ui-server-fips version 2.50.1-r1 fixes 9 vulnerabilities: CVE-2026-39821, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858...

CLEANSTART-2026-RN37675 Security fixes in temporal-ui-server-fips 2.48.4-r1

Package temporal-ui-server-fips version 2.48.4-r1 fixes 9 vulnerabilities: CVE-2026-39821, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858...

CLEANSTART-2026-RK66396 Security fixes in temporal-ui-server-fips 2.49.1-r1

Package temporal-ui-server-fips version 2.49.1-r1 fixes 9 vulnerabilities: CVE-2026-39821, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858...

GO-2026-6293 vulnerabilities

Vulnerabilities for packages: temporal, temporal-ui-server, kube-metrics-adapter...

GHSA-VFP3-V2GW-7WFQ vulnerabilities

Vulnerabilities for packages: temporal, temporal-ui-server, kube-metrics-adapter...

CVE-2026-55677 vulnerabilities

Vulnerabilities for packages: temporal, temporal-ui-server, kube-metrics-adapter...

GO-2025-3462 vulnerabilities

Vulnerabilities for packages: temporal-server-fips, temporal-ui-server-fips, temporal-fips, temporal-server, temporal-ui-server, temporal...

GO-2026-5208 vulnerabilities

Vulnerabilities for packages: snyk-cli, kube-metrics-adapter, temporal-ui-server-fips, gotenberg, temporal-fips, temporal, kube-metrics-adapter-fips, temporal-ui-server, fq...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, cue, newrelic-fluent-bit-output, helm-push, paranoia, speedtest-go, src-fingerprint, tigera-operator, bank-vaults-fips, k8ssandra-operator-fips, capslock, k3d, kubernetes-csi-external-provisioner, nri-mongodb, bazelisk, nri-haproxy,...

GO-2024-2609 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, cue, newrelic-fluent-bit-output, helm-push, paranoia, speedtest-go, src-fingerprint, tigera-operator, bank-vaults-fips, k8ssandra-operator-fips, capslock, k3d, kubernetes-csi-external-provisioner, nri-mongodb, bazelisk, nri-haproxy,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, helm-push, tigera-operator, src-fingerprint, bank-vaults-fips, k3d, bank-vaults, cosign, cosign-fips, tigera-operator-fips, trillian, kube-state-metrics-fips, weaviate, kubernetes-dashboard, cfssl, terraform-provider-aws, kubeflow-katib,...

GO-2025-3462 vulnerabilities

Vulnerabilities for packages: temporal, temporal-ui-server, temporal-server...

GO-2026-5208 vulnerabilities

Vulnerabilities for packages: temporal, fq, kube-metrics-adapter, snyk-cli, temporal-ui-server...

CLEANSTART-2026-UG13000 Security fixes in temporal-ui-server-fips 2.51.1-r1

Package temporal-ui-server-fips version 2.51.1-r1 fixes 36 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CVE-2026-65655

When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...

EUVD-2026-56924

When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...

CVE-2026-65655 Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxy

When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...

CVE-2026-65655

When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...

CVE-2026-65655 Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxy

When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...

CVE-2026-65655 Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxy

When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...