temporalio/temporal Security Advisories | GitStock

medium2026-04-10

CVE-2026-5724-Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint

GHSA-q98v-9f9w-f49q

low2026-04-01

CVE-2026-5199-Temporal Server: attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster

GHSA-xpg8-3hhp-p7w8

low2025-12-30

CVE-2025-14986-Temporal has a namespace policy bypass allowing requests to be authorized for incorrect contexts

GHSA-p2gr-hm8g-q772

medium2025-12-30

CVE-2025-14987-Temporal has an Incorrect Authorization vulnerability

GHSA-hmhp-gh8m-c8xp

medium2025-09-15

CVE-2025-8396-Temporal OSS Server Vulnerable to Allocation of Resources Without Limits or Throttling

GHSA-p768-c3pr-6459

medium2024-04-04

CVE-2024-2689-Temporal Server Denial of Service

GHSA-wmxc-v39r-p9wf

low2023-06-30

CVE-2023-3485-Temporal Server vulnerable to Incorrect Authorization and Insecure Default Initialization of Resource

GHSA-gm2g-2xr9-pxxj