Temporal is now a CVE Numbering Authority (CNA)

This post announces Temporal's attainment of CVE Numbering Authority (CNA) status, enhancing security transparency. It details a specific vulnerability (CVE-2023-3485) found in self-hosted Temporal Server related to namespace protection bypass due to default configuration. The post explains the vulnerability's impact, the fix in Temporal version 1.20.0, and a workaround for earlier versions (_frontend.enableTokenNamespaceEnforcement_ setting). Temporal Cloud was unaffected.