Hatchet-dev Hatchet vulnerabilities
- hatchet-dev hatchet Hatchet through 0.110.5 Unauthenticated Memory Exhaustion via SNS Ingestion Endpoint 6.9 Medium
- hatchet-dev hatchet Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter 4.3 Medium
- hatchet-dev hatchet Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher 3.1 Low
- hatchet-dev hatchet hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState 7.1 High
- hatchet-dev hatchet Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check 6.3 Medium
- hatchet-dev hatchet Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler 4.1 Medium
- hatchet-dev hatchet Hatchet: Cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe 6.4 Medium
- hatchet Hatchet: Cross-tenant information disclosure in `listTasksByDAGIds` 5.3 Medium