Skip to content
OpenAdvisories

Package · Go

go.temporal.io/server

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-5724 Public exploit

    Missing Authentication on Streaming gRPC Replication Endpoint

    The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicati…

    Temporal Technologies temporal go.temporal.io/server Go