23 matches found
GO-2025-3462 vulnerabilities
Vulnerabilities for packages: temporal-server-fips, temporal-ui-server-fips, temporal-server, temporal-ui-server, temporal-fips, temporal...
GO-2026-5208 vulnerabilities
Vulnerabilities for packages: kube-metrics-adapter-fips, gotenberg, snyk-cli, temporal-ui-server-fips, temporal-fips, kube-metrics-adapter, fq, temporal-ui-server, temporal...
GO-2024-2598 vulnerabilities
Vulnerabilities for packages: atlantis-fips, etcd, node-problem-detector, nodetaint, cluster-proportional-autoscaler, logstash-exporter-fips, cortex, nats, prometheus-mysqld-exporter, vt-cli, docker-credential-gcr, gobuster, local-path-provisioner, php-fpmexporter, dex, nuclei, nri-memcached,...
GO-2024-2609 vulnerabilities
Vulnerabilities for packages: atlantis-fips, etcd, node-problem-detector, nodetaint, cluster-proportional-autoscaler, logstash-exporter-fips, cortex, nats, prometheus-mysqld-exporter, vt-cli, docker-credential-gcr, gobuster, local-path-provisioner, php-fpmexporter, dex, nuclei, nri-memcached,...
GO-2023-2402 vulnerabilities
Vulnerabilities for packages: atlantis-fips, node-problem-detector, timestamp-authority-fips, cortex, nats, prometheus-mysqld-exporter, gobuster, local-path-provisioner, dex, prometheus-adapter, crossplane-provider-aws, tigera-operator-fips, cosign, git-lfs, eksctl, flux-kustomize-controller,...
GO-2025-3462 vulnerabilities
Vulnerabilities for packages: temporal-ui-server, temporal, temporal-server...
GO-2026-5208 vulnerabilities
Vulnerabilities for packages: temporal-ui-server, temporal, snyk-cli, kube-metrics-adapter, fq...
CLEANSTART-2026-UG13000 Security fixes in temporal-ui-server-fips 2.51.1-r1
Package temporal-ui-server-fips version 2.51.1-r1 fixes 36 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...
CVE-2026-65655
When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...
EUVD-2026-56924
When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...
CVE-2026-65655 Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxy
When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...
CVE-2026-65655
When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...
CVE-2026-65655 Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxy
When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...
CVE-2026-65655
Temporal UI Server may set OAuth credential cookies without Secure when TLS terminates at a reverse proxy and forwards callbacks to the UI server over HTTP. This can allow an attacker-controlled scenario to access access-token and possibly refresh-token cookies if the attacker can steer UI hostna...
PT-2026-70889
When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...
CLEANSTART-2026-BQ82502 Security fixes in temporal-ui-server-fips 2.44.0-r0
Package temporal-ui-server-fips version 2.44.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...
CLEANSTART-2026-FO93349 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-33186, CVE-2026-40890, ghsa-77fj-vx54-gvh7, ghsa-p77j-4mvh-x3m3 applied in versions: 2.44.0-r0, 2.48.2-r0
Multiple security vulnerabilities affect the temporal-ui-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-77FJ-VX54-GVH7 vulnerabilities
Vulnerabilities for packages: temporal-ui-server, temporal, snyk-cli, kube-metrics-adapter, fq...