Skip to content

Product

temporalio github.com/temporalio/s2s-proxy vulnerabilities

1 published CVE affecting temporalio github.com/temporalio/s2s-proxy, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest temporalio github.com/temporalio/s2s-proxy CVEs

Newest publication first

  1. CVE-2026-96770 s2s-proxy accepts untrusted client certificates

    Published
    CriticalCVSS 9.3 EPSS 0.32%

    All published s2s-proxy versions through 0.2.2 are affected. In versions 0.1.16 through 0.2.2, TLS server listeners use Go's RequireAnyClientCert mode when skipCAVerification is false. This mode checks that the client holds the certificate's private key but does not verify the ce...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.