Vendor
Temporal Technologies, Inc.
18 known vulnerabilities in products by Temporal Technologies, Inc., 0 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-65653 | temporalio/tchannel-go zero-chunk call fragment causes process termination | — | |
| High | CVE-2026-65652 | temporalio/tchannel-go malformed checksum type causes process termination | — | |
| High | CVE-2026-65651 | Temporal Technologies Temporalio/sqlparser: Uncontrolled Recursion | — | |
| High | CVE-2026-89139 | Temporal Server: OS Command Injection | — | |
| High | CVE-2026-65654 | temporalio/ringpop-go fails to enforce configured label limits on inbound membership gossip | — | |
| High | CVE-2026-87858 | Temporal Server: Reliance on Untrusted Inputs in a Security Decision | — | |
| High | CVE-2026-16651 | temporalio/sqlparser malformed MySQL version comments can cause a panic | — | |
| Critical | CVE-2026-96770 | s2s-proxy accepts untrusted client certificates | — | |
| High | CVE-2026-16652 | Temporal Server Schedule exclusion search can cause excessive CPU consumption | — | |
| High | CVE-2026-104355 | Temporal Server: Incorrect Authorization | — | |
| Medium | CVE-2026-108126 | temporal-proxy payload decryption is not bound to the request namespace | — | |
| Medium | CVE-2026-89140 | Temporal Server: Authorization Bypass Through User-Controlled Key | — | |
| Medium | CVE-2026-5724 | Missing Authentication on Streaming gRPC Replication Endpoint | — | |
| Low | CVE-2026-65655 | Temporal UI Server: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute | — | |
| Medium | CVE-2024-2689 | Denial of Service if invalid UTF-8 sent | 4.4 | |
| Low | CVE-2026-5199 | Cross Namespace Access via Batch Operation | — | |
| Low | CVE-2023-3485 | Insecure Default Authorization in Temporal Server | 3.0 | |
| Low | CVE-2025-1243 | Field in api-go proxy not transformed before version 1.44.1 | — |
Products
| Temporal Server | 9 | 0 |