PT-2026-70889

When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...

CLEANSTART-2026-BQ82502 Security fixes in temporal-ui-server-fips 2.44.0-r0

Package temporal-ui-server-fips version 2.44.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-FO93349 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-33186, CVE-2026-40890, ghsa-77fj-vx54-gvh7, ghsa-p77j-4mvh-x3m3 applied in versions: 2.44.0-r0, 2.48.2-r0

Multiple security vulnerabilities affect the temporal-ui-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: temporal, fq, snyk-cli, kube-metrics-adapter, temporal-ui-server...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: temporal, fq, snyk-cli, kube-metrics-adapter, temporal-ui-server...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, snyk-cli, temporal-ui-server-fips, kube-metrics-adapter, temporal, temporal-fips, kube-metrics-adapter-fips, gotenberg, fq...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, snyk-cli, temporal-ui-server-fips, kube-metrics-adapter, temporal, temporal-fips, kube-metrics-adapter-fips, gotenberg, fq...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: dask-gateway, syft, lazygit, kubescape-server, kots, victoriametrics-cluster, kubeflow-fips, flux-image-reflector-controller-fips, secrets-store-csi-driver-provider-azure, gcsfuse, yunikorn-web, dcgm-exporter-fips, crossplane-function-auto-ready-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: minify, secrets-store-csi-driver-provider-azure, custom-pod-autoscaler-fips, kubecolor, victoriametrics-operator, agentbeat-fips, kubernetes-dashboard-fips, aws-flb-kinesis, runc-fips, gitsign, minio-fips, amazon-cloudwatch-agent-operator-fips, azuredisk-csi-fips,...