← All credits

An external security researcher who reported this issue responsibly to Temporal Technologies

8 vulnerability records and advisories credit this contributor.

Temporal Server Schedule exclusion search can cause excessive CPU consumption

temporalio/sqlparser malformed MySQL version comments can cause a panic

temporalio/sqlparser deeply nested unary expressions can cause a fatal stack overflow during AST traversal

temporalio/tchannel-go malformed checksum type causes process termination

temporalio/tchannel-go zero-chunk call fragment causes process termination

temporalio/ringpop-go fails to enforce configured label limits on inbound membership gossip

Temporal Server completion callback source header can direct attacker-chosen requests to the internal frontend with administrator authorization

Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxy