Go/go.temporal.io/api CVE-2025-1243: low 2, EPSS 0.09%
Unencrypted transmission in Temporal api-go library in go.temporal.io/api
Action: Upgrade go.temporal.io/api to 1.44.1 or later.
go get go.temporal.io/api@v1.44.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.44.1 | - |
Fixed versions
| 1.44.1 |
Sources
- osv: GO-2025-3462
- nvd: CVE-2025-1243
- https://github.com/advisories/GHSA-q9w6-cwj4-gf4p
- https://github.com/temporalio/api-go/commit/dad8b169ada911d3778e070484d1ae78a58bd22b
- https://github.com/temporalio/api-go/releases/tag/v1.44.1
- https://temporal.io/blog/announcing-a-new-operation-workflow-update
CVE-2025-1243 · published · modified · JSON