CVE-2026-5724 vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal-server-fips, temporal-server...

GHSA-Q98V-9F9W-F49Q vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal-server-fips, temporal-server...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: temporal, kube-metrics-adapter, fq, snyk-cli, temporal-ui-server...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: temporal, kube-metrics-adapter, fq, snyk-cli, temporal-ui-server...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal-ui-server-fips, snyk-cli, fq, kube-metrics-adapter-fips, kube-metrics-adapter, gotenberg, temporal-ui-server, temporal...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal-ui-server-fips, snyk-cli, fq, kube-metrics-adapter-fips, kube-metrics-adapter, gotenberg, temporal-ui-server, temporal...

CLEANSTART-2026-YY57430 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the temporal-server-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

GHSA-XPG8-3HHP-P7W8 vulnerabilities

Vulnerabilities for packages: temporal...

CVE-2026-5199 vulnerabilities

Vulnerabilities for packages: temporal...

Robust Semi-Supervised Temporal Intrusion Detection for Adversarial Cloud Networks

Cloud networks increasingly rely on machine learning based Network Intrusion Detection Systems to defend against evolving cyber threats. However, real-world deployments are challenged by limited labeled data, non-stationary traffic, and adaptive adversaries. While semi-supervised learning can...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: longhorn-cli, trivy-operator-fips, victoriametrics-operator, kubernetes-event-exporter, filebrowser, oras-fips, zabbix-agent2, rancher-webhook-fips, wuzz, nri-nginx-fips, cert-manager-cmctl, chaos-mesh-fips, crossplane-provider-aws-sns-fips, logstash-exporter,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: longhorn-cli, trivy-operator-fips, zabbix-agent2, wuzz, prometheus-postgres-exporter-fips, go-licenses, thanos-operator, cloud-sql-proxy, falcoctl, spicedb-operator-fips, crossplane-provider-aws-rds-fips, virt-handler, emqx-exporter-fips, longhorn-share-manager-fips,...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the AdminService/StreamWorkflowReplicationMessages endpoint. An attacker can access replication streams and exfiltrate data by connecting to the frontend gRPC server without providing...

EUVD-2026-21607

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

GHSA-Q98V-9F9W-F49Q Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

CVE-2026-5724

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

CVE-2026-5724 Missing Authentication on Streaming gRPC Replication Endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

CVE-2026-5724

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

CVE-2026-5724 Missing Authentication on Streaming gRPC Replication Endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...