Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/09/22 8:40 p.m.7 views

Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter

Cross-tenant disclosure risk on DurableTask bidi RPC This is a low-severity, low-risk cross-tenant data exposure vuln caused by blindly accepting a durable task id, in addition to a list of node and branch ids that identify records in that task's event log, and returning them to the caller via th...

4.3CVSS5.9AI score0.00168EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder