Insufficiently specific bounds checking on authorization header could lead to denial of service in the Temporal server on all platforms due to excessive memory allocation.This issue affects all platforms and versions of OSS Server prior to 1.26.3, 1.27.3, and 1.28.1 (i.e., fixed in 1.26.3, 1.27.3, and 1.28.1 and later). Temporal Cloud services are not impacted.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Insufficiently specific bounds checking on authorization header could lead to denial of service in the
    Temporal server on all platforms due to excessive memory allocation.This issue affects all platforms and
    versions of OSS Server prior to 1.26.3, 1.27.3, and 1.28.1 (i.e., fixed in 1.26.3, 1.27.3, and 1.28.1 and
    later). Temporal Cloud services are not impacted. (CVE-2025-8396)

ID	Name	Product	Family	Type	Severity
458492	Echo: go.temporal.io/server: security update to 1.26.3	Tenable Cloud Security	Echo Local Security Checks	Local	medium
458492	Echo: go.temporal.io/server: security update to 1.26.3	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
435325	SCA: security update for go.temporal.io/server (GHSA-p768-c3pr-6459)	Tenable Cloud Security	SCA Checks	Local	medium
435325	SCA: security update for go.temporal.io/server (GHSA-p768-c3pr-6459)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2025-8396

medium

Tenable Plugins

medium

medium

medium

medium