1. TemporalIO SDK Version Constraint Blocks Downstream Access to Critical Rust CVE Patches
A security investigation into the cloudsql-postgres-app image has uncovered that four unpatched Rust vulnerabilities—including one rated HIGH severity—were not living in platform infrastructure as originally reported, but inside the pre-compiled Rust binary bundled within the temporalio Python wheel. The finding expose...