Vulnerabilities

Filters

1 selected

7 records

Sort

Vendor: hatchet-dev Clear all filters

TI-2026-70733 CVE-2026-108755 · GHSA-pjjx-3frh-55ch

Unauthenticated memory exhaustion in Hatchet via SNS ingestion endpoint

LOW 36

Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated attackers to exhaust memory via the SNS ingestion endpoint.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00315 Published 2026-10-11 No fix listed CWE-770

TI-2026-60309 CVE-2026-88978 · GHSA-992g-9cr3-vm5x

Authorization bypass in hatchet-dev hatchet

LOW 20

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00281 Published 2026-09-21 Fixed in 0.106.1 CWE-639

TI-2026-57935 CVE-2026-84298 · GHSA-9q4h-f4x5-ffq8

Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher

LOW 15

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00243 Published 2026-09-21 Fixed in 0.95.3 CWE-639

TI-2026-44164 CVE-2026-61687 · GHSA-phg3-3g28-wq9v

hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState

LOW 30

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00171 Published 2026-09-21 Fixed in 0.91.1 CWE-1275

TI-2026-45168 CVE-2026-63342 · GHSA-g26x-m427-f48f

Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check

LOW 28

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00314 Published 2026-09-21 Fixed in 0.91.1 CWE-863

TI-2026-44159 CVE-2026-61681 · GHSA-fjwv-jf2v-j499

Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler

LOW 19

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale.

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.00311 Published 2026-09-21 Fixed in 0.91.1 CWE-918

TI-2026-39557 CVE-2026-54746 · GHSA-8x7x-83cf-c3pg

Hatchet: Cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe

LOW 29

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00368 Published 2026-08-28 Fixed in 0.91.1, 0.91.2 CWE-639