Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2026/01/07 9:55 a.m.•25 views

CVE-2025-1243

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS5.9AI score0.00093EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-2097

Malicious code in bioql PyPI...

2CVSS6.2AI score0.00093EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/03/14 2:59 a.m.•7 views

SUSE CVE-2025-1243

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS6.3AI score0.00093EPSS
SaveExploits0References2
OSV
OSV
•added 2025/02/12 3:31 a.m.•22 views

GHSA-Q9W6-CWJ4-GF4P Unencrypted transmission in Temporal api-go library

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS5.9AI score0.00093EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/02/12 12:09 a.m.•16 views

CVE-2025-1243 Field in api-go proxy not transformed before version 1.44.1

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS6.2AI score0.00093EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/12 12:09 a.m.•2867 views

CVE-2025-1243

Temporal api-go library prior to v1.44.1 fails to send update response data to Data Converter when used in a gRPC proxy during UpdateWorkflowExecution, causing incomplete Data Converter transformations (e.g., encryption) on the update response field. This occurs only when using the UpdateWorkflow...

2CVSS6.2AI score0.00093EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/12 12:00 a.m.•2 views

CVE-2025-1243: Missing Encryption of Sensitive Data

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS5.8AI score0.00093EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/12 12:00 a.m.•15 views

api-go 安全漏洞

api-go is an interface program from temporal open source. A security vulnerability exists in api-go versions prior to 1.44.1, which stems from the use of a proxy that does not send update response messages to the Data Converter...

2CVSS6.4AI score0.00093EPSS
SaveExploits0References2
Rows per page
Query Builder