Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Temporal Server FIPS could let attackers view or change data
published 7 months ago
Summary
The Temporal Server FIPS software has several security weaknesses that could allow an attacker to read or modify your business data. These problems are fixed in the latest 1.29.2‑r0 and newer releases. Upgrade to the newest version as soon as possible to keep your information safe.
What to do
- Update cleanstart temporal-server-fips to version 1.29.2-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | temporal-server-fips |
< 1.29.2-r1 Fix: upgrade to 1.29.2-r1
|
Original advisory text
Security fixes for CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.29.2-r0, 1.29.2-r1
Multiple security vulnerabilities affect the temporal-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2026-24051 URL
- https://osv.dev/vulnerability/CVE-2026-25679 URL
- https://osv.dev/vulnerability/CVE-2026-26958 URL
- https://osv.dev/vulnerability/CVE-2026-27139 URL
- https://osv.dev/vulnerability/CVE-2026-27142 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-24051 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-25679 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-26958 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27139 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27142 URL
Timeline
Published1 Apr 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-BT99405 · OSV
Track software like this
Free during beta