Security
فارسی
All products

github.com/hatchet-dev/hatchet

Go · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation HandlerCVE-2026-61681 · GHSA-FJWV-JF2V-J499Version ranges need review. github.com/hatchet-dev/hatchet Go Medium Fix reported
Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthStateCVE-2026-61687 · GHSA-PHG3-3G28-WQ9VVersion ranges need review. github.com/hatchet-dev/hatchet Go High Fix reported
Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filterCVE-2026-88978 · GHSA-992G-9CR3-VM5XVersion ranges need review. github.com/hatchet-dev/hatchet Go Medium Fix reported
Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 DispatcherCVE-2026-84298 · GHSA-9Q4H-F4X5-FFQ8Version ranges need review. github.com/hatchet-dev/hatchet Go Low Fix reported
Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization CheckCVE-2026-63342 · GHSA-G26X-M427-F48FVersion ranges need review. github.com/hatchet-dev/hatchet Go Medium Fix reported
Hatchet allows cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and UnsubscribeCVE-2026-54746 · GHSA-8X7X-83CF-C3PGVersion ranges need review. github.com/hatchet-dev/hatchet Go Medium Fix reported
Hatchet affected by cross-tenant information disclosure in `listTasksByDAGIds`CVE-2026-42572 · GHSA-55GC-6FMC-FPX9Version ranges need review. github.com/hatchet-dev/hatchet Go Medium Fix reported