Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:55 a.m.5 views

CVE-2025-1243

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS6AI score0.00037EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-2097

Malicious code in bioql PyPI...

2CVSS6.2AI score0.00037EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/03/14 2:59 a.m.1 views

SUSE CVE-2025-1243

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS6.3AI score0.00037EPSS
Exploits0References2
OSV
OSV
added 2025/02/12 3:31 a.m.5 views

GHSA-Q9W6-CWJ4-GF4P Unencrypted transmission in Temporal api-go library

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS5.9AI score0.00037EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/02/12 12:9 a.m.14 views

CVE-2025-1243 Field in api-go proxy not transformed before version 1.44.1

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS6.2AI score0.00037EPSS
Exploits0References2
CVE
CVE
added 2025/02/12 12:9 a.m.2810 views

CVE-2025-1243

Temporal api-go library prior to v1.44.1 fails to send update response data to Data Converter when used in a gRPC proxy during UpdateWorkflowExecution, causing incomplete Data Converter transformations (e.g., encryption) on the update response field. This occurs only when using the UpdateWorkflow...

2CVSS6.2AI score0.00037EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.2 views

api-go 安全漏洞

api-go is an interface program from temporal open source. A security vulnerability exists in api-go versions prior to 1.44.1, which stems from the use of a proxy that does not send update response messages to the Data Converter...

2CVSS6.4AI score0.00037EPSS
Exploits0References2
Rows per page
Query Builder