Affected by GO-2026-5134 and 5 other vulnerabilities

GO-2026-5134: Hatchet affected by cross-tenant information disclosure in `listTasksByDAGIds` in github.com/hatchet-dev/hatchet

GO-2026-6309: Hatchet allows cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe in github.com/hatchet-dev/hatchet

GO-2026-6560: Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter in github.com/hatchet-dev/hatchet

GO-2026-6561: Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher in github.com/hatchet-dev/hatchet

GO-2026-6565: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler in github.com/hatchet-dev/hatchet

GO-2026-6567: Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check in github.com/hatchet-dev/hatchet

constants

package

v0.73.71 Latest Latest Go to latest Published: Nov 21, 2025 License: MIT Imports: 0 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/hatchet-dev/hatchet

Links

Documentation ¶

Index ¶

type MetadataKey
- func (k MetadataKey) String() string
type ResourceTypeValue
- func (k ResourceTypeValue) String() string

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type MetadataKey ¶

type MetadataKey string

const (
	CorrelationIdKey  MetadataKey = "correlationId"
	ResourceIdKey     MetadataKey = "resourceId"
	ResourceTypeKey   MetadataKey = "resourceType"
	GRPCMethodKey     MetadataKey = "grpc_method"
	EventIDKey        MetadataKey = "hatchet__event_id"
	EventKeyKey       MetadataKey = "hatchet__event_key"
	CronExpressionKey MetadataKey = "hatchet__cron_expression"
	CronNameKey       MetadataKey = "hatchet__cron_name"
)

func (MetadataKey) String ¶

func (k MetadataKey) String() string

type ResourceTypeValue ¶

type ResourceTypeValue string

const (
	ResourceTypeApiToken          ResourceTypeValue = "api-token"
	ResourceTypeTenantMember      ResourceTypeValue = "tenant-member"
	ResourceTypeTenantInvite      ResourceTypeValue = "tenant-invite"
	ResourceTypeWorkflow          ResourceTypeValue = "workflow"
	ResourceTypeWorkflowRun       ResourceTypeValue = "workflow-run"
	ResourceTypeScheduledWorkflow ResourceTypeValue = "scheduled-workflow"
	ResourceTypeEvent             ResourceTypeValue = "event"
)

func (ResourceTypeValue) String ¶

func (k ResourceTypeValue) String() string

Source Files ¶

View all Source files

metadata.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL