109 matches found
Deserialization of Untrusted Data
Overview checkov is an Infrastructure as code static analysis Affected versions of this package are vulnerable to Deserialization of Untrusted Data via use of eval. An attacker can execute arbitrary code by submitting a specially crafted Terraform file for analysis. This is only exploitable if th...
bridgecrew (>=3.0.0 <=3.2.414), codesecure-core (>=1.0.0b10 <=1.0.29) +3 more potentially affected by CVE-2025-2180 via checkov (>=3.0.0 <=3.2.414)
checkov PYPI version =3.0.0, =3.0.0, =1.0.0b10, =0.2.0, =1.0.0, =1.0.56 Source cves: CVE-2025-2180 Source advisory: SNYK:PYTHON-CHECKOV-11800950...
CVE-2025-2181
A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...
CVE-2025-2180
An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...
CVE-2025-2181
CVE-2025-2181 affects Palo Alto Networks Checkov by Prisma Cloud. The vulnerability is a sensitive information disclosure that can cause Prisma Cloud access keys to be exposed in Checkov’s output (cleartext). Multiple sources corroborate exposure of credentials via Checkov output during operation...
CVE-2025-2181 Checkov by Prisma Cloud: Cleartext Exposure of Credentials
A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...
CVE-2025-2181 Checkov by Prisma Cloud: Cleartext Exposure of Credentials
A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...
CVE-2025-2180 Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution
An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...
CVE-2025-2180 Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution
An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...
CVE-2025-2180
The CVE-2025-2180 entry describes an unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma Cloud. Affected product: Checkov (in Prisma Cloud) versions prior to 3.2.415. Vulnerable component: the deserialization process when scanning Terraform files. Root cause: unsafe deser...
PT-2025-33021
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Checkov by Prisma® Cloud affected versions not specified Description: A sensitive information disclosure issue exists in Palo Alto Networks Checkov by Prisma® Cloud. This can lead to the cleartext exposure of Prisma Cloud...
Palo Alto Networks Checkov 安全漏洞
Palo Alto Networks Checkov is a code static analysis tool from Palo Alto Networks, Inc. A security vulnerability exists in Palo Alto Networks Checkov versions prior to 3.2.415 that stems from improper deserialization and could lead to the execution of arbitrary code...
Palo Alto Networks Checkov 安全漏洞
Palo Alto Networks Checkov is a code static analysis tool from Palo Alto Networks USA. A security vulnerability exists in Palo Alto Networks Checkov, which stems from an information leak that could lead to the exposure of Prisma Cloud access keys in plaintext...
PT-2025-33020 · Palo Alto Networks · Prisma Cloud +1
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Checkov by Prisma® Cloud versions prior to 3.2.415 Description: An unsafe deserialization issue in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non-administrative...
GHSA-5RJG-FVGR-3XXF vulnerabilities
Vulnerabilities for packages: text-generation-inference, spamcheck, kserve, datadog-agent-fips, pgadmin4-fips, py3-pipenv, aws-cli, azure-functions-host, emissary, dask-gateway, nvidia-nsight-compute-13.3, datadog-agent, nvidia-nsight-compute-13.1, ansible-operator, ansible-operator-fips,...
CVE-2025-47273 vulnerabilities
Vulnerabilities for packages: text-generation-inference, spamcheck, kserve, datadog-agent-fips, pgadmin4-fips, py3-pipenv, aws-cli, azure-functions-host, emissary, dask-gateway, nvidia-nsight-compute-13.3, datadog-agent, nvidia-nsight-compute-13.1, ansible-operator, ansible-operator-fips,...
GHSA-5RJG-FVGR-3XXF vulnerabilities
Vulnerabilities for packages: emissary, kserve, checkov, aws-cli, py3-pipenv, superset, dask-gateway, jwt-tool, datadog-agent...
CVE-2025-47273 vulnerabilities
Vulnerabilities for packages: emissary, kserve, checkov, aws-cli, py3-pipenv, superset, dask-gateway, jwt-tool, datadog-agent...
awslabs-ccapi-mcp-server (>=1.0.1 <=1.0.18), bridgecrew (>=3.2.415 <=3.2.477) +9 more potentially affected by unknown CVE via asteval (=1.0.5)
asteval PYPI version =1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - awslabs-ccapi-mcp-server =1.0.1, =3.2.415, =3.2.415, =0.1.130, =6.0.0, =5.8.0, =5.8.0, =0.0.8, =0.1.0, =0.15.0 Source cves: unknown CVE Source...