Affected by GO-2026-5134 and 5 other vulnerabilities

GO-2026-5134: Hatchet affected by cross-tenant information disclosure in `listTasksByDAGIds` in github.com/hatchet-dev/hatchet

GO-2026-6309: Hatchet allows cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe in github.com/hatchet-dev/hatchet

GO-2026-6560: Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter in github.com/hatchet-dev/hatchet

GO-2026-6561: Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher in github.com/hatchet-dev/hatchet

GO-2026-6565: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler in github.com/hatchet-dev/hatchet

GO-2026-6567: Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check in github.com/hatchet-dev/hatchet

loader

package

v0.83.33 Latest Latest Go to latest Published: Apr 21, 2026 License: MIT Imports: 7 Imported by: 1

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/hatchet-dev/hatchet

Links

Documentation ¶

Index ¶

func GetClientConfigFromConfigFile(tokenOverride *string, cf *client.ClientConfigFile) (res *client.ClientConfig, err error)
func LoadClientConfigFile(files ...[]byte) (*client.ClientConfigFile, error)
type ConfigLoader
- func (c *ConfigLoader) LoadClientConfig(token *string) (res *client.ClientConfig, err error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func GetClientConfigFromConfigFile ¶

func GetClientConfigFromConfigFile(tokenOverride *string, cf *client.ClientConfigFile) (res *client.ClientConfig, err error)

func LoadClientConfigFile ¶

func LoadClientConfigFile(files ...[]byte) (*client.ClientConfigFile, error)

LoadClientConfigFile loads the worker config file via viper

Types ¶

type ConfigLoader ¶

type ConfigLoader struct {
	// contains filtered or unexported fields
}

func (*ConfigLoader) LoadClientConfig ¶

func (c *ConfigLoader) LoadClientConfig(token *string) (res *client.ClientConfig, err error)

LoadClientConfig loads the client configuration

Source Files ¶

View all Source files

loader.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL