TT
Vendor
Temporal Technologies, Inc.
12
CVEs
0
On KEV
1
New 30D
Products
TE6.0
temporal-proxy
Temporal Technologies, Inc.
1 CVEs0 on KEV1 new
TE6.3
temporal
Temporal Technologies, Inc.
2 CVEs0 on KEV0 new
TE8.7
temporalio/sqlparser
Temporal Technologies, Inc.
2 CVEs0 on KEV0 new
TE8.7
temporalio/tchannel-go
Temporal Technologies, Inc.
2 CVEs0 on KEV0 new
AL2.0
api-go library
Temporal Technologies, Inc.
1 CVEs0 on KEV0 new
S29.3
s2s-proxy
Temporal Technologies, Inc.
1 CVEs0 on KEV0 new
TS4.4
Temporal Server
Temporal Technologies, Inc.
1 CVEs0 on KEV0 new
TU2.3
Temporal UI Server
Temporal Technologies, Inc.
1 CVEs0 on KEV0 new
TE8.7
temporalio/ringpop-go
Temporal Technologies, Inc.
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108126 | TE temporal-proxy Temporal Technologies, Inc. | 6.0 | Oct 15 | temporal-proxy payload decryption is not bound to the request namespace |
| CVE-2026-96770 | S2 s2s-proxy Temporal Technologies, Inc. | 9.3 | Sep 23 | s2s-proxy accepts untrusted client certificates |
| CVE-2026-65654 | TE temporalio/ringpop-go Temporal Technologies, Inc. | 8.7 | Sep 21 | temporalio/ringpop-go fails to enforce configured label limits on inbound membership gossip |
| CVE-2026-65653 | TE temporalio/tchannel-go Temporal Technologies, Inc. | 8.7 | Sep 21 | temporalio/tchannel-go zero-chunk call fragment causes process termination |
| CVE-2026-65652 | TE temporalio/tchannel-go Temporal Technologies, Inc. | 8.7 | Sep 21 | temporalio/tchannel-go malformed checksum type causes process termination |
| CVE-2026-65651 | TE temporalio/sqlparser Temporal Technologies, Inc. | 8.7 | Sep 21 | temporalio/sqlparser deeply nested unary expressions can cause a fatal stack overflow during AST traversal |
| CVE-2026-16651 | TE temporalio/sqlparser Temporal Technologies, Inc. | 8.7 | Sep 21 | temporalio/sqlparser malformed MySQL version comments can cause a panic |
| CVE-2026-65655 | TU Temporal UI Server Temporal Technologies, Inc. | 2.3 | Aug 11 | Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxy |
| CVE-2026-5724 | TE temporal Temporal Technologies, Inc. | 6.3 | Apr 10 | Missing Authentication on Streaming gRPC Replication Endpoint |
| CVE-2026-5199 | TE temporal Temporal Technologies, Inc. | 2.3 | Apr 1 | Cross Namespace Access via Batch Operation |
| CVE-2025-1243 | AL api-go library Temporal Technologies, Inc. | 2.0 | Feb 12 | Field in api-go proxy not transformed before version 1.44.1 |
| CVE-2024-2689 | TS Temporal Server Temporal Technologies, Inc. | 4.4 | Apr 3 | Denial of Service if invalid UTF-8 sent |