TT
Vendor
Temporal Technologies, Inc.
11
CVEs
0
On KEV
2
New 30D
Products
TS8.7
Temporal Server
Temporal Technologies, Inc.
10 CVEs0 on KEV2 new
OS6.9
OSS Server
Temporal
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-89140 | TS Temporal Server Temporal Technologies, Inc. | 6.0 | Oct 12 | Temporal Server internal completion callbacks are not bound to their namespace, allowing cross-namespace changes to Scheduler V2 schedule state |
| CVE-2026-104355 | TS Temporal Server Temporal Technologies, Inc. | 7.0 | Oct 12 | Temporal Server applies inbound namespace replication from a connected peer cluster to local namespaces |
| CVE-2026-89139 | TS Temporal Server Temporal Technologies, Inc. | 8.7 | Sep 21 | Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host |
| CVE-2026-87858 | TS Temporal Server Temporal Technologies, Inc. | 7.2 | Sep 21 | Temporal Server completion callback source header can direct attacker-chosen requests to the internal frontend with administrator authorization |
| CVE-2026-65651 | TS Temporal Server Temporal Technologies, Inc. | 8.7 | Sep 21 | temporalio/sqlparser deeply nested unary expressions can cause a fatal stack overflow during AST traversal |
| CVE-2026-16651 | TS Temporal Server Temporal Technologies, Inc. | 8.7 | Sep 21 | temporalio/sqlparser malformed MySQL version comments can cause a panic |
| CVE-2026-16652 | TS Temporal Server Temporal Technologies, Inc. | 7.1 | Sep 21 | Temporal Server Schedule exclusion search can cause excessive CPU consumption |
| CVE-2025-14986 | TE Temporal Temporal | 1.3 | Dec 30 | ExecuteMultiOperation Namespace Policy Bypass |
| CVE-2025-14987 | TE Temporal Temporal | 5.3 | Dec 30 | Cross Namespace Commands Authorization Bypass |
| CVE-2025-8396 | OS OSS Server Temporal | 6.9 | Sep 15 | Insufficiently specific bounds checking on authorization header could lead to denial of service in the Temporal server on all platforms due to excessive memory allocation.This… |
| CVE-2023-3485 | TE Temporal Temporal | 3.6 | Jun 30 | Insecure Default Authorization in Temporal Server |