[ Vendor · 5 CVEs ]
hatchet-dev
CVEs affecting hatchet-dev published in the last 30 days, plus any hatchet-dev CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108755 | 11 Oct 2026 | CVSS 5.3 | hatchet-dev hatchetHatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated attackers to exhaust memory via… | |
| CVE-2026-88978 | 21 Sep 2026 | CVSS 4.3 | Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filterHatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.106.1, the WorkerStatus gRPC polling… | Fix |
| CVE-2026-84298 | 21 Sep 2026 | CVSS 3.1 | Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 DispatcherHatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.95.3, the V1 DurableTask stream… | Fix |
| CVE-2026-63342 | 21 Sep 2026 | CVSS 6.3 | Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization CheckHatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1… | Fix |
| CVE-2026-61681 | 21 Sep 2026 | CVSS 4.1 | Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation HandlerHatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, the SNS UnsubscribeConfirmation… | Fix |