Advisories · Technology
Temporal Technologies, Inc. Temporal Server.
Every CVE that names Temporal Technologies, Inc. Temporal Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host
- Temporal Technologies, Inc. Temporal Server
- Command injection
- Broken access control
- CVSS 6.0 Medium
Temporal Server internal completion callbacks are not bound to their namespace, allowing cross-namespace changes to Scheduler V2 schedule state
- Temporal Technologies, Inc. Temporal Server
- Broken access control
- CVSS 7.0 High
Temporal Server applies inbound namespace replication from a connected peer cluster to local namespaces
- Temporal Technologies, Inc. Temporal Server
- Broken access control
- CVSS 8.7 High
Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host
- Temporal Technologies, Inc. Temporal Server
- Command injection
- CWE-749
- CVSS 7.2 High
Temporal Server completion callback source header can direct attacker-chosen requests to the internal frontend with administrator authorization
- Temporal Technologies, Inc. Temporal Server
- CWE-807
- CVSS 8.7 High
temporalio/sqlparser deeply nested unary expressions can cause a fatal stack overflow during AST traversal
- Temporal Technologies, Inc. temporalio/sqlparser
- Temporal Technologies, Inc. Temporal Server
- Denial of service
- CVSS 8.7 High
temporalio/sqlparser malformed MySQL version comments can cause a panic
- Temporal Technologies, Inc. temporalio/sqlparser
- Temporal Technologies, Inc. Temporal Server
- CWE-129
- CVSS 7.1 High
Temporal Server Schedule exclusion search can cause excessive CPU consumption
- Temporal Technologies, Inc. Temporal Server
- CWE-606