Skip to content
OpenAdvisories

Product · Temporal Technologies

Temporal UI Server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2026-65655

    Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxy

    When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Tempora…

    Temporal Technologies Temporal UI Server