TS
Product
Temporal Server
10
CVEs
0
On KEV
8.7
Max CVSS
2
New 30D
Severity mix
Critical 0High 6Medium 2Low 2
Watch
Add Temporal Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-89139 | 8.7 | Sep 21 | Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host Affected: 1.31.0 before 1.31.3 |
| CVE-2026-65651 | 8.7 | Sep 21 | temporalio/sqlparser deeply nested unary expressions can cause a fatal stack overflow during AST traversal Affected: 0.10.0 through 1.29.7; 1.30.0 before 1.30.7; 1.31.0 before 1.31.3 |
| CVE-2026-16651 | 8.7 | Sep 21 | temporalio/sqlparser malformed MySQL version comments can cause a panic Affected: 1.29.0 through 1.29.7; 1.30.0 before 1.30.7; 1.31.0 before 1.31.3 |
| CVE-2026-87858 | 7.2 | Sep 21 | Temporal Server completion callback source header can direct attacker-chosen requests to the internal frontend with administrator authorization Affected: 1.30.0 before 1.30.7; 1.31.0 before 1.31.3; 1.25.0 through 1.29.7 |
| CVE-2026-16652 | 7.1 | Sep 21 | Temporal Server Schedule exclusion search can cause excessive CPU consumption Affected: 1.17.0 through 1.29.7; 1.30.0 before 1.30.7; 1.31.0 before 1.31.3 |
| CVE-2026-104355 | 7.0 | Oct 12 | Temporal Server applies inbound namespace replication from a connected peer cluster to local namespaces Affected: 1.0.0 through 1.29.7; 1.30.0 before 1.30.8; 1.31.0 before 1.31.4; 1.32.0 before 1.32.1 |
Showing 6