Affected by GO-2026-5134
and 5 other vulnerabilities
GO-2026-5134: Hatchet affected by cross-tenant information disclosure in `listTasksByDAGIds` in github.com/hatchet-dev/hatchet
GO-2026-6309: Hatchet allows cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe in github.com/hatchet-dev/hatchet
GO-2026-6560: Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter in github.com/hatchet-dev/hatchet
GO-2026-6561: Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher in github.com/hatchet-dev/hatchet
GO-2026-6565: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler in github.com/hatchet-dev/hatchet
GO-2026-6567: Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check in github.com/hatchet-dev/hatchet
Process reads all files from the specified directory within the embedded filesystem,
executes them as text/templates with the provided data, and writes the results
to the destination directory, preserving the directory structure.
Files named POST_QUICKSTART.md are skipped and not copied to the destination.
ProcessPostQuickstart reads and processes the POST_QUICKSTART.md file from the template directory.
Returns the processed content as a string, or empty string if the file doesn't exist.
Affected by 
Documentation
¶
Source Files