Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-2097

Malicious code in bioql PyPI...

2CVSS6.2AI score0.00037EPSS
Exploits0References4
OSV
OSV
added 2025/03/03 4:11 p.m.5 views

GO-2025-3462 Unencrypted transmission in Temporal api-go library in go.temporal.io/api

Unencrypted transmission in Temporal api-go library in go.temporal.io/api...

2CVSS6.3AI score0.00037EPSS
Exploits0References4
Veracode
Veracode
added 2025/02/14 6:43 a.m.5 views

Improper Data Encryption

Temporal api-go is vulnerable to Improper Data Encryption. The vulnerability is due to missing Data Converter transformations due to the update response information not being processed by the Data Converter when using a gRPC proxy with the api-go module, leading to unencrypted data exposure...

2CVSS5.9AI score0.00037EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/02/12 3:31 a.m.5 views

GHSA-Q9W6-CWJ4-GF4P Unencrypted transmission in Temporal api-go library

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS5.9AI score0.00037EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2025/02/12 3:31 a.m.10 views

Unencrypted transmission in Temporal api-go library

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS6.5AI score0.00037EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2025/02/12 1:15 a.m.7 views

CVE-2025-1243

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS6.3AI score
Exploits0References2
NVD
NVD
added 2025/02/12 1:15 a.m.8 views

CVE-2025-1243

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS0.00037EPSS
Exploits0References2
Rows per page
Query Builder