atlantis-android

Atlantis Android AndroidアプリからのHTTP/HTTPSトラフィックをキャプチャし、デバッグのためにProxymanに送信します。 概要 Atlantis Androidは、Proxymanのコンパニオンライブラリです。プロキシの設定や証明書のインストールを行わずに、Androidアプリケーションのネットワークトラフィックをキャプチャして検査できます。 特徴 OkHttpトラフィックの自動インターセプト WebSocketメッセージのキャプチャ（送信、受信、クローズ） Retrofit 2.9+ および Apollo Kotlin 3.x/4.x に対応...

aixcc-afc-atlantis

Atlantis 本仓库包含 Atlantis ，即 Team Atlanta 提交至 AIxCC 决赛（AFC）的 Cyber Reasoning System（CRS）。 Atlantis 旨在自动发现和分析软件系统中的漏洞。 主要系统实现位于 example-crs-webservice 目录中。 快速开始 要部署和运行 Atlantis CRS 系统，请参阅 example-crs-architecture 目录中的文档。 仓库结构 example-crs-webservice/ - 主要的 Atlantis CRS 实现 example-crs-architecture/ -...

CLEANSTART-2026-AT27834 Security fixes in atlantis 0.43.0-r1

Package atlantis version 0.43.0-r1 fixes 1 vulnerabilities: CVE-2026-56864...

CLEANSTART-2026-MF46365 Security fixes in atlantis 0.47.1-r1

Package atlantis version 0.47.1-r1 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...

CLEANSTART-2026-SY03145 Security fixes in atlantis 0.47.0-r1

Package atlantis version 0.47.0-r1 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...

CLEANSTART-2026-VB57994 Security fixes in atlantis-fips 0.44.1-r1

Package atlantis-fips version 0.44.1-r1 fixes 1 vulnerabilities: CVE-2026-56864...

CLEANSTART-2026-VT46196 Security fixes in atlantis-fips 0.45.0-r1

Package atlantis-fips version 0.45.0-r1 fixes 1 vulnerabilities: CVE-2026-56864...

CLEANSTART-2026-DZ45567 Security fixes in atlantis-fips 0.45.0-r2

Package atlantis-fips version 0.45.0-r2 fixes 1 vulnerabilities: CVE-2026-56864...

CLEANSTART-2026-KF38495 Security fixes in atlantis 0.45.0-r1

Package atlantis version 0.45.0-r1 fixes 1 vulnerabilities: CVE-2026-56864...

CLEANSTART-2026-MJ04112 Security fixes in atlantis 0.44.1-r0

Package atlantis version 0.44.1-r0 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...

CLEANSTART-2026-BN39310 Security fixes in atlantis-fips 0.47.1-r1

Package atlantis-fips version 0.47.1-r1 fixes 10 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CVE-2026-82282

Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to access GitHub App credentials. Attackers can observe or intercept the GitHub redirect during setup to obtain the RSA private key and webhook secret, enabling installation token...

CVE-2026-82282

Atlantis (through version 0.47.1 ) contains an authentication bypass in the /github-app/setup endpoint. The endpoint fails to require authentication, allowing unauthenticated callers to observe or intercept the GitHub redirect during app setup and extract the RSA private key and webhook secret . ...

CVE-2026-82282 Atlantis GitHub App Setup Endpoint Returns App Credentials to Unauthenticated Callers

Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to access GitHub App credentials. Attackers can observe or intercept the GitHub redirect during setup to obtain the RSA private key and webhook secret, enabling installation token...

CVE-2026-82282 Atlantis GitHub App Setup Endpoint Returns App Credentials to Unauthenticated Callers

Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to access GitHub App credentials. Attackers can observe or intercept the GitHub redirect during setup to obtain the RSA private key and webhook secret, enabling installation token...

EUVD-2026-67813

Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to access GitHub App credentials. Attackers can observe or intercept the GitHub redirect during setup to obtain the RSA private key and webhook secret, enabling installation token...

GO-2026-6273 Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis

Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis...

CVE-2026-64679

creationtimestamp| type| source ---|---|--- 2026-08-21 22:35:19+00:00| published-proof-of-concept| https://github.com/runatlantis/atlantis/security/advisories/GHSA-26w5-6g95-gj28 2026-08-22 02:01:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtn6l3hsty2o 2026-08-22...

CVE-2026-64679

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From 0.19.8 until 0.45.0, Atlantis does not consistently validate user-controlled workspace values supplied through accepted repository-level atlantis.yaml configuration or authenticated...

GHSA-26W5-6G95-GJ28 Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation

Summary Atlantis versions = 0.19.8 and 0.45.0 did not consistently validate user-controlled workspace values before using them to construct local workspace paths. A crafted workspace value containing path traversal segments could cause Atlantis to resolve workspace paths outside the intended...