144 matches found
CVE-2026-19585 vulnerabilities
Vulnerabilities for packages: opentofu, snyk-cli, task, tfsec, wolfictl, tflint, zarf, kubescape, k9s, conftest, steampipe, terraform, terragrunt, xeol...
GHSA-86F4-5VJ6-9FG3 vulnerabilities
Vulnerabilities for packages: opentofu, snyk-cli, task, tfsec, wolfictl, tflint, zarf, kubescape, k9s, conftest, steampipe, terraform, terragrunt, xeol...
GO-2026-6865 vulnerabilities
Vulnerabilities for packages: datadog-agent, slsa-verifier, tempo, datadog-operator, wal-g, azcopy, opencost, falcosidekick, gitsign, paranoia, conftest, terraform, dbmate, kafkaexporter, weaviate, ko, manifest-tool, pulumi-language-dotnet, witness, ipfs-cluster, grafana-pyroscope,...
CVE-2026-116591 vulnerabilities
Vulnerabilities for packages: datadog-agent, slsa-verifier, tempo, datadog-operator, wal-g, azcopy, opencost, falcosidekick, gitsign, paranoia, conftest, terraform, dbmate, kafkaexporter, weaviate, ko, manifest-tool, pulumi-language-dotnet, witness, ipfs-cluster, grafana-pyroscope,...
GHSA-FPMH-FRQ8-7RJ8 vulnerabilities
Vulnerabilities for packages: datadog-agent, slsa-verifier, tempo, datadog-operator, wal-g, azcopy, opencost, falcosidekick, gitsign, paranoia, conftest, terraform, dbmate, kafkaexporter, weaviate, ko, manifest-tool, pulumi-language-dotnet, witness, ipfs-cluster, grafana-pyroscope,...
CVE-2026-64672
Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.1.1, the terragrunt catalog command derives a predictable per-repository catalog clone root under the shared system temporary directory and follows a symlink alread...
CVE-2026-64672
Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.1.1, the terragrunt catalog command derives a predictable per-repository catalog clone root under the shared system temporary directory and follows a symlink alread...
CVE-2026-64672
Terragrunt versions prior to 1.1.1 are vulnerable to a predictable temporary symlink clobber vulnerability in the terragrunt catalog command. The application derives a deterministic clone path under the shared system temporary directory (e.g., /catalog-). A local attacker with write access to the...
CVE-2026-64672 Terragrunt catalog predictable temp symlink clobber
Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.1.1, the terragrunt catalog command derives a predictable per-repository catalog clone root under the shared system temporary directory and follows a symlink alread...
CVE-2026-64672 Terragrunt catalog predictable temp symlink clobber
Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.1.1, the terragrunt catalog command derives a predictable per-repository catalog clone root under the shared system temporary directory and follows a symlink alread...
CLEANSTART-2026-FA67601 Security fix for GHSA-6g7g-w4f8-9c9x applied in: terragrunt-fips 0.97.2-r2, terragrunt-fips 0.98.0-r2, tempo 2.9.1-r0
GHSA-6g7g-w4f8-9c9x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-134777
These are all security issues fixed in the terragrunt-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:12352-1 terragrunt-1.2.1-1.1 on GA media
These are all security issues fixed in the terragrunt-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed...
GO-2026-6768 Terragrunt catalog predictable temp symlink clobber in github.com/gruntwork-io/terragrunt
Terragrunt catalog predictable temp symlink clobber in github.com/gruntwork-io/terragrunt...
PT-2026-118067
Terragrunt catalog predictable temp symlink clobber in github.com/gruntwork-io/terragrunt...
GHSA-WV6G-X823-WX9M Terragrunt catalog predictable temp symlink clobber
Summary Terragrunt's terragrunt catalog command clones each repository referenced in your catalog configuration into a temporary working directory. In affected versions, the clone path it derived was deterministic and sat under the shared system temporary directory, in the form /catalog-. Because...
Terragrunt catalog predictable temp symlink clobber
Summary Terragrunt's terragrunt catalog command clones each repository referenced in your catalog configuration into a temporary working directory. In affected versions, the clone path it derived was deterministic and sat under the shared system temporary directory, in the form /catalog-. Because...
PT-2026-115367
Name of the Vulnerable Software and Affected Versions Terragrunt versions prior to 1.1.1 Description The terragrunt catalog command clones repositories into a temporary directory using a deterministic path based on a base64 sha1 hash of the repository URL. A local attacker with write access to th...
GO-2026-6609 vulnerabilities
Vulnerabilities for packages: chartmuseum, loki, prometheus-adapter, aactl, rancher-agent, cert-manager, atlantis, argo-workflows, temporal-ui-server, k6, grafana, opencost, kyverno-policy-reporter-ui, grafana-alloy, falco-no-driver, external-dns, flux-source-controller, gitness, kubernetes,...
GHSA-F4XW-M386-M277 vulnerabilities
Vulnerabilities for packages: chartmuseum, loki, prometheus-adapter, aactl, rancher-agent, cert-manager, atlantis, argo-workflows, temporal-ui-server, k6, grafana, opencost, kyverno-policy-reporter-ui, grafana-alloy, falco-no-driver, external-dns, flux-source-controller, gitness, kubernetes,...