Affected by GO-2026-6560
and 2 other vulnerabilities
GO-2026-6560: Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter in github.com/hatchet-dev/hatchet
GO-2026-6561: Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher in github.com/hatchet-dev/hatchet
GO-2026-6565: Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler in hatchet-dev/hatchet
patch-api-resources patches the generated Api.ts file to attach x-resources metadata from the OpenAPI spec to each API method, enabling callers to check resource scope at runtime:
patch-api-resources patches the generated Api.ts file to attach x-resources metadata from the OpenAPI spec to each API method, enabling callers to check resource scope at runtime:
Click to show internal directories.
Click to hide internal directories.
go.dev uses cookies from Google to deliver and enhance the quality of its services and to
analyze traffic. Learn more.
Affected by 
Directories
¶