tocsin

CVE-2026-61681

2 advisories.

Go/hatchet-dev/hatchet CVE-2026-61681: medium 4.1

Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler

Action: Upgrade hatchet-dev/hatchet to 0.91.1 or later.

go get hatchet-dev/hatchet@v0.91.1

Affected

introducedfixedlast affected
00.91.1-

Fixed versions

0.91.1

Sources

CVE-2026-61681 · published · modified · JSON

Go/github.com/hatchet-dev/hatchet CVE-2026-61681: unknown

SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler in github.com/hatchet-dev/hatchet

Action: Upgrade github.com/hatchet-dev/hatchet to 0.91.2 or later.

go get github.com/hatchet-dev/hatchet@v0.91.2

Affected

introducedfixedlast affected
00.91.2-

Fixed versions

0.91.2

Sources

CVE-2026-61681 · published · modified · JSON