CVE-2026-61681Published
Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-61681 · Microsoft / collected KEV context
cve-program · CVE-2026-61681
- https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-fjwv-jf2v-j499
- https://github.com/hatchet-dev/hatchet/commit/2d211bce16e5022afaf95780de82dc30e0bcba98
euvd · EUVD-2026-83976
- https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-fjwv-jf2v-j499
- https://github.com/hatchet-dev/hatchet/commit/2d211bce16e5022afaf95780de82dc30e0bcba98
nvd · CVE-2026-61681
- https://github.com/hatchet-dev/hatchet/commit/2d211bce16e5022afaf95780de82dc30e0bcba98
- https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-fjwv-jf2v-j499
osv · GHSA-fjwv-jf2v-j499
- https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-fjwv-jf2v-j499
- https://nvd.nist.gov/vuln/detail/CVE-2026-61681
- https://github.com/hatchet-dev/hatchet/commit/2d211bce16e5022afaf95780de82dc30e0bcba98
- https://github.com/hatchet-dev/hatchet
osv · GO-2026-6565
Related operational evidence
Explicit CVE identifiers- Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler · Affected-version evidence changed · 4 Nov 2026