github.com/hatchet-dev/hatchet
Go2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/hatchet-dev/hatchetpage 1 of 1
- CVE-2026-42572MEDIUMCVSS 5.3EG 5.3✓ Fixed in 0.83.392026-05-14
Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.83.39, a missing authorization directive on the GET /api/v1/stable/dags/tasks endpoint caused Hatchet's tenant-membership check…
- CVE-2026-54746MEDIUMCVSS 6.4EG 6.4✓ Fixed in 0.91.22026-08-28
Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. From 0.40.0 until 0.91.1, the Dispatcher gRPC service does not verify that a request's worker ID belongs to the tenant identified by the b…
Check whether github.com/hatchet-dev/hatchet is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/hatchet-dev/hatchet CVEs against the assets you own.
Start Free Scan →