Skip to content
OpenAdvisories

Product · Temporal Technologies

temporal-proxy

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.0

    temporal-proxy payload decryption is not bound to the request namespace

    temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were encrypted for. When payload encryption is enabled, the proxy chooses the decryption key by an identifier stored in the payload rather than by the namespace of the r…