Go/hatchet-dev/hatchet CVE-2026-61681: medium 4.1, EPSS 0.31%
Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler
Action: Upgrade hatchet-dev/hatchet to 0.91.1 or later.
go get hatchet-dev/hatchet@v0.91.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.91.1 | - |
Fixed versions
| 0.91.1 |
Sources
- osv: GHSA-fjwv-jf2v-j499
- https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-fjwv-jf2v-j499
- https://nvd.nist.gov/vuln/detail/CVE-2026-61681
- https://github.com/hatchet-dev/hatchet/commit/2d211bce16e5022afaf95780de82dc30e0bcba98
- https://github.com/hatchet-dev/hatchet
CVE-2026-61681 · published · modified · JSON