CVE-2025-2181

CVE-2025-2181 affects Palo Alto Networks Checkov by Prisma Cloud. The vulnerability is a sensitive information disclosure that can cause Prisma Cloud access keys to be exposed in Checkov’s output (cleartext). Multiple sources corroborate exposure of credentials via Checkov output during operation...

CVE-2025-2180 Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...

CVE-2025-2180 Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...

CVE-2025-2180

The CVE-2025-2180 entry describes an unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma Cloud. Affected product: Checkov (in Prisma Cloud) versions prior to 3.2.415. Vulnerable component: the deserialization process when scanning Terraform files. Root cause: unsafe deser...

Checkov by Prisma Cloud: Cleartext Exposure of Credentials

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output. Work around: No known workarounds exist for this issue...

Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...

Palo Alto Networks Checkov 安全漏洞

Palo Alto Networks Checkov is a code static analysis tool from Palo Alto Networks USA. A security vulnerability exists in Palo Alto Networks Checkov, which stems from an information leak that could lead to the exposure of Prisma Cloud access keys in plaintext...

Palo Alto Networks Checkov 安全漏洞

Palo Alto Networks Checkov is a code static analysis tool from Palo Alto Networks, Inc. A security vulnerability exists in Palo Alto Networks Checkov versions prior to 3.2.415 that stems from improper deserialization and could lead to the execution of arbitrary code...

CVE-2025-2180: Deserialization of Untrusted Data

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...

PT-2025-33020 · Palo Alto Networks · Prisma Cloud +1

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Checkov by Prisma® Cloud versions prior to 3.2.415 Description: An unsafe deserialization issue in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non-administrative...

CVE-2025-2181: Cleartext Storage of Sensitive Information

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...

PT-2025-33021

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Checkov by Prisma® Cloud affected versions not specified Description: A sensitive information disclosure issue exists in Palo Alto Networks Checkov by Prisma® Cloud. This can lead to the cleartext exposure of Prisma Cloud...

GHSA-5RJG-FVGR-3XXF vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.3, superset, py3-pipenv, ansible-operator-fips, azure-functions-host, text-generation-inference, ansible-operator, nvidia-nsight-compute-13.2, jwt-tool, pgadmin4-fips, kserve, nvidia-nsight-compute-13.1, datadog-agent, aws-cli, checkov,...

CVE-2025-47273 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.3, superset, py3-pipenv, ansible-operator-fips, azure-functions-host, text-generation-inference, ansible-operator, nvidia-nsight-compute-13.2, jwt-tool, pgadmin4-fips, kserve, nvidia-nsight-compute-13.1, datadog-agent, aws-cli, checkov,...

GHSA-5RJG-FVGR-3XXF vulnerabilities

Vulnerabilities for packages: kserve, emissary, checkov, jwt-tool, superset, py3-pipenv, aws-cli, datadog-agent, dask-gateway...

CVE-2025-47273 vulnerabilities

Vulnerabilities for packages: kserve, emissary, checkov, jwt-tool, superset, py3-pipenv, aws-cli, datadog-agent, dask-gateway...

CVE-2024-42367 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, airflow, kserve, nemo, request-1276, dask-gateway, checkov...

GHSA-JWHX-XCG6-8XHJ vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, airflow, kserve, nemo, request-1276, dask-gateway, checkov...

GHSA-CX63-2MW6-8HW5 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, superset, py3-pipenv, py3.9-setuptools, airflow, k8s-sidecar, nemo, az, reflex, request-1276, nvidia-nsight-compute-13.1, nvidia-nsight-compute-13.2, checkov, kubeflow-katib...

CVE-2024-6345 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, superset, py3-pipenv, py3.9-setuptools, airflow, k8s-sidecar, nemo, az, reflex, request-1276, nvidia-nsight-compute-13.1, nvidia-nsight-compute-13.2, checkov, kubeflow-katib...