Affected by GO-2026-5134 and 5 other vulnerabilities

GO-2026-5134: Hatchet affected by cross-tenant information disclosure in `listTasksByDAGIds` in github.com/hatchet-dev/hatchet

GO-2026-6309: Hatchet allows cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe in github.com/hatchet-dev/hatchet

GO-2026-6560: Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter in github.com/hatchet-dev/hatchet

GO-2026-6561: Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher in github.com/hatchet-dev/hatchet

GO-2026-6565: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler in github.com/hatchet-dev/hatchet

GO-2026-6567: Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check in github.com/hatchet-dev/hatchet

v1

package

v0.73.34 Latest Latest Go to latest Published: Oct 3, 2025 License: MIT Imports: 13 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/hatchet-dev/hatchet

Links

Documentation ¶

Index ¶

func AuthContext(ctx context.Context, token string) context.Context
func WithHostPort(hostPort string) func(*clientOpts)
func WithLogger(l *zerolog.Logger) func(*clientOpts)
func WithTLS(tls *tls.Config) func(*clientOpts)
func WithToken(token string) func(*clientOpts)
type GRPCClient
- func NewGRPCClient(fs ...GRPCClientOpt) (*GRPCClient, error)
- func (c *GRPCClient) Admin() admincontracts.AdminServiceClient
type GRPCClientFactory
- func NewGRPCClientFactory(fs ...GRPCClientOpt) *GRPCClientFactory
- func (f *GRPCClientFactory) NewGRPCClient(token string) (*GRPCClient, error)
type GRPCClientOpt

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func AuthContext ¶

func AuthContext(ctx context.Context, token string) context.Context

func WithHostPort ¶

func WithHostPort(hostPort string) func(*clientOpts)

func WithLogger ¶

func WithLogger(l *zerolog.Logger) func(*clientOpts)

func WithTLS ¶

func WithTLS(tls *tls.Config) func(*clientOpts)

func WithToken ¶

func WithToken(token string) func(*clientOpts)

Types ¶

type GRPCClient ¶

type GRPCClient struct {
	// contains filtered or unexported fields
}

func NewGRPCClient ¶

func NewGRPCClient(fs ...GRPCClientOpt) (*GRPCClient, error)

func (*GRPCClient) Admin ¶

func (c *GRPCClient) Admin() admincontracts.AdminServiceClient

type GRPCClientFactory ¶

type GRPCClientFactory struct {
	// contains filtered or unexported fields
}

func NewGRPCClientFactory ¶

func NewGRPCClientFactory(fs ...GRPCClientOpt) *GRPCClientFactory

func (*GRPCClientFactory) NewGRPCClient ¶

func (f *GRPCClientFactory) NewGRPCClient(token string) (*GRPCClient, error)

type GRPCClientOpt ¶

type GRPCClientOpt func(*clientOpts)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL