PT-2026-6501 · Go · Go.Temporal.Io/Server

Publicado 2026-01-12 · Atualizado 2026-01-12

OSV

Temporal has a namespace policy bypass allowing requests to be authorized for incorrect contexts in go.temporal.io/server

Identificadores relacionados

GO-2025-4272

Produtos afetados

Go.Temporal.Io/Server

Referências · 7

• https://github.com/temporalio/temporal/releases/tag/v1.27.4 · Nota
• https://github.com/temporalio/temporal/releases/tag/v1.29.2 · Nota
• https://github.com/temporalio/temporal/releases/tag/v1.28.2 · Nota
• https://github.com/temporalio/temporal/pull/8839 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-14986 · Nota de Segurança
• https://github.com/advisories/GHSA-p2gr-hm8g-q772 · Nota
• https://osv.dev/vulnerability/GO-2025-4272 · Aviso do Fabricante