{"id":"GO-2026-6565","revision":"ed0bbedb98bc4e2dbcfbfc0a057c199e","records":[{"revision":"ed0bbedb98bc4e2dbcfbfc0a057c199e","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6565","aliases":["CVE-2026-61681","GHSA-fjwv-jf2v-j499"],"title":"SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler in github.com/hatchet-dev/hatchet","description":"SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler in github.com/hatchet-dev/hatchet","state":0,"publishedAt":"2026-10-01T20:23:38+00:00","modifiedAt":"2026-10-07T17:45:13.2663642+00:00","affected":[{"ecosystem":"Go","name":"github.com/hatchet-dev/hatchet","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.91.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-fjwv-jf2v-j499","https://github.com/hatchet-dev/hatchet/commit/2d211bce16e5022afaf95780de82dc30e0bcba98"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6565","license":"OSV · upstream source license applies","key":"osv:GO-2026-6565","identifiers":["GO-2026-6565","CVE-2026-61681","GHSA-fjwv-jf2v-j499"]},"retained":false,"historicalAffected":[]}],"coverage":[]}