temporalio/tchannel-go vulnerabilities

2 known vulnerabilities in temporalio/tchannel-go from Temporal Technologies. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  temporalio/tchannel-go: Improper Validation of Array Index

  CVE-2026-65653Sep 21, 2026Temporal Technologies

  github.com/temporalio/tchannel-go did not reject TChannel call fragments containing checksum metadata but no length-prefixed argument chunks. The fragment reader left its chunk slice empty and then unconditionally selected the first element. A network peer can

• 8.7 High severity

  temporalio/tchannel-go: Improper Validation of Array Index

  CVE-2026-65652Sep 21, 2026Temporal Technologies

  github.com/temporalio/tchannel-go did not validate the one-byte checksum-type field in inbound TChannel call frames. A network peer that can reach a listener can complete the standard initialization handshake and send a call request with an unsupported checksu