StackRadar

CVE-2025-8396

Medium

Advisory

Published 15 Sept 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
11
of 17,781 indexed, latest versions
Container images
16
deployed by those charts
Fix available
1 of 1
affected package

Temporal OSS Server Vulnerable to Allocation of Resources Without Limits or Throttling

Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 16 images.

Affected packageAffected versionsFixed inImages
go.temporal.io/servergolangv0.0.0-20240906203326-1d0c6644b675, v0.0.0-20250327224552-a31fd7a9e5db, v0.0.0-20260410203332-d155094229c0, v0.0.0-20260611151627-0f82498d9dd5+3 more1.26.316
OSV records
GHSA-p768-c3pr-6459
Also known as
GO-2025-3953

Charts affected

11 by stars
ChartLatestAffected imagesRadar Score
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2025-8396.

Container imageDigestPackageFixed in
temporalio/server:1.22.4c0a44c26397b
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3

Open the chart page →

14,893
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2025-8396.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.28cfde8170c92f
go.temporal.io/server@v0.0.0-20260410203332-d155094229c0
1.26.3

Open the chart page →

30,816
agentareaagentareaVerified publisher0.0.181 of 16See more

agentarea agentarea 0.0.18

1 of the 16 container images this version deploys carry CVE-2025-8396.

Container imageDigestPackageFixed in
temporalio/auto-setup:1.29.15b3502a3b685
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3

Open the chart page →

14,914
temporalglasskubeVerified publisher0.45.2-gk.12 of 14See more

temporal glasskube 0.45.2-gk.1

2 of the 14 container images this version deploys carry CVE-2025-8396.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
go.temporal.io/server@v0.0.0-20240906203326-1d0c6644b675
1.26.3
temporalio/server:1.25.08a5798191dea
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3

Open the chart page →

16,346
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2025-8396.

Container imageDigestPackageFixed in
temporalio/auto-setup:1.27.2b44cbfeb43db
go.temporal.io/server@v0.0.0-20250327224552-a31fd7a9e5db
1.26.3

Open the chart page →

12,473
temporalcastaiVerified publisher0.54.22 of 14See more

temporal castai 0.54.2

2 of the 14 container images this version deploys carry CVE-2025-8396.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.26.237e2e33dbd7b
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3
temporalio/server:1.26.21e2626efcbc1
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3

Open the chart page →

16,198
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2025-8396.

Container imageDigestPackageFixed in
temporalio/auto-setup:1.29.7f14912b699cf
go.temporal.io/server@v0.0.0-20260611151627-0f82498d9dd5
1.26.3

Open the chart page →

58,897
temporaldtrdnk-helm-chartsVerified publisher0.35.02 of 13See more

temporal dtrdnk-helm-charts 0.35.0

2 of the 13 container images this version deploys carry CVE-2025-8396.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.22.4258958fe2ff2
go.temporal.io/server@v1.22.2
1.26.3
temporalio/server:1.22.4c0a44c26397b
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3

Open the chart page →

20,205
temporalgroundcover1.12.3572 of 2See more

temporal groundcover 1.12.357

2 of the 2 container images this version deploys carry CVE-2025-8396.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260730-1af8cea3b8538
go.temporal.io/server@v0.0.0-20260611151627-0f82498d9dd5
1.26.3
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3

Open the chart page →

2,013
temporaltemporal0.28.92 of 13See more

temporal temporal 0.28.9

2 of the 13 container images this version deploys carry CVE-2025-8396.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.22.0836af062af30
go.temporal.io/server@v1.21.4
1.26.3
temporalio/server:1.22.0ddeebf8bad8f
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3

Open the chart page →

21,005
wexa-studiowexa-studio1.2.02 of 15See more

wexa-studio wexa-studio 1.2.0

2 of the 15 container images this version deploys carry CVE-2025-8396.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3
temporalio/server:1.29.1c1e3326b2ce1
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3

Open the chart page →

14,983

Container images carrying it

16 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
temporalio/server:1.22.4c0a44c26397b
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3
2
temporalio/admin-tools:1.22.4258958fe2ff2
go.temporal.io/server@v1.22.2
1.26.3
1
temporalio/admin-tools:1.26.237e2e33dbd7b
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3
1
temporalio/admin-tools:1.22.0836af062af30
go.temporal.io/server@v1.21.4
1.26.3
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3
1
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
go.temporal.io/server@v0.0.0-20240906203326-1d0c6644b675
1.26.3
1
temporalio/admin-tools:1.28cfde8170c92f
go.temporal.io/server@v0.0.0-20260410203332-d155094229c0
1.26.3
1
temporalio/auto-setup:1.29.15b3502a3b685
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3
1
temporalio/auto-setup:1.27.2b44cbfeb43db
go.temporal.io/server@v0.0.0-20250327224552-a31fd7a9e5db
1.26.3
1
temporalio/auto-setup:1.29.7f14912b699cf
go.temporal.io/server@v0.0.0-20260611151627-0f82498d9dd5
1.26.3
1
temporalio/server:1.26.21e2626efcbc1
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3
1
temporalio/server:1.25.08a5798191dea
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3
1
temporalio/server:1.29.1c1e3326b2ce1
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3
1
temporalio/server:1.22.0ddeebf8bad8f
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3
1
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260730-1af8cea3b8538
go.temporal.io/server@v0.0.0-20260611151627-0f82498d9dd5
1.26.3
1
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
go.temporal.io/server@v1.18.1-0.20230217005328-b313b7f58641
1.26.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.