Lucene search
+L

312 matches found

Github Security Blog
Github Security Blog
added 2026/09/22 8:40 p.m.5 views

Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter

Cross-tenant disclosure risk on DurableTask bidi RPC This is a low-severity, low-risk cross-tenant data exposure vuln caused by blindly accepting a durable task id, in addition to a list of node and branch ids that identify records in that task's event log, and returning them to the caller via th...

4.3CVSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder