Executive brief
Temporal Server Denial of Service in go.temporal.io/server
Affected products
- Go go.temporal.io/server
Junglewise Threat Intelligence
CVE-2024-2689: GO-2024-2689 - Temporal Server Denial of Service in go.temporal.io/server
CVE-2024-2689 · Severity: low · CVSS 3.1 · Published 2024-06-04
Technologies: go.temporal.io/server (Go). Vendors: Go.
Related threats
- Temporal Server missing authentication in gRPC streaming interceptor
- Temporal Server authorization bypass in batch workflow operations
- GO-2026-4273 - Temporal has an Incorrect Authorization vulnerability in go.temporal.io/server
- GO-2025-4272 - Temporal has a namespace policy bypass allowing requests to be authorized for incorrect contexts in go.temporal.io/server
- GO-2025-3953 - Temporal OSS Server Vulnerable to Allocation of Resources Without Limits or Throttling in go.temporal.io/server