Go/github.com/hatchet-dev/hatchet CVE-2026-61681: medium 4.1, EPSS 0.31%
SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler in github.com/hatchet-dev/hatchet
Action: Upgrade github.com/hatchet-dev/hatchet to 0.91.2 or later.
go get github.com/hatchet-dev/hatchet@v0.91.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.91.2 | - |
Fixed versions
| 0.91.2 |
Sources
- osv: GO-2026-6565
- nvd: CVE-2026-61681
- https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-fjwv-jf2v-j499
- https://github.com/hatchet-dev/hatchet/commit/2d211bce16e5022afaf95780de82dc30e0bcba98
CVE-2026-61681 · published · modified · JSON