Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-84298 · Microsoft / collected KEV context

EUVD-2026-83979

GHSA-9q4h-f4x5-ffq8

GO-2026-6561

cve-program · CVE-2026-84298

• https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-9q4h-f4x5-ffq8
• https://github.com/hatchet-dev/hatchet/commit/9555bfdd1e97f61d25e614ccaa107c5fb7dc4976

euvd · EUVD-2026-83979

• https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-9q4h-f4x5-ffq8
• https://github.com/hatchet-dev/hatchet/commit/9555bfdd1e97f61d25e614ccaa107c5fb7dc4976

nvd · CVE-2026-84298

• https://github.com/hatchet-dev/hatchet/commit/9555bfdd1e97f61d25e614ccaa107c5fb7dc4976
• https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-9q4h-f4x5-ffq8

osv · GHSA-9q4h-f4x5-ffq8

• https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-9q4h-f4x5-ffq8
• https://nvd.nist.gov/vuln/detail/CVE-2026-84298
• https://github.com/hatchet-dev/hatchet/commit/9555bfdd1e97f61d25e614ccaa107c5fb7dc4976
• https://github.com/hatchet-dev/hatchet

osv · GO-2026-6561

• https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-9q4h-f4x5-ffq8
• https://nvd.nist.gov/vuln/detail/CVE-2026-84298
• https://github.com/hatchet-dev/hatchet/commit/9555bfdd1e97f61d25e614ccaa107c5fb7dc4976

No related operational record is retained in the current change model.