aixcc-afc-atlantis

Atlantis Este repositorio contiene Atlantis , el Sistema de Razonamiento Cibernético CRS del equipo Atlanta, presentado en la Competencia Final de AIxCC AFC. Atlantis está diseñado para descubrir y analizar automáticamente vulnerabilidades en sistemas de software. La implementación principal del...

atlantis-android

Atlantis Android AndroidアプリからのHTTP/HTTPSトラフィックをキャプチャし、デバッグのためにProxymanに送信します。 概要 Atlantis Androidは、Proxymanのコンパニオンライブラリです。プロキシの設定や証明書のインストールを行わずに、Androidアプリケーションのネットワークトラフィックをキャプチャして検査できます。 特徴 OkHttpトラフィックの自動インターセプト WebSocketメッセージのキャプチャ（送信、受信、クローズ） Retrofit 2.9+ および Apollo Kotlin 3.x/4.x に対応...

CLEANSTART-2026-AT27834 Security fixes in atlantis 0.43.0-r1

Package atlantis version 0.43.0-r1 fixes 1 vulnerabilities: CVE-2026-56864...

CLEANSTART-2026-MF46365 Security fixes in atlantis 0.47.1-r1

Package atlantis version 0.47.1-r1 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...

CLEANSTART-2026-SY03145 Security fixes in atlantis 0.47.0-r1

Package atlantis version 0.47.0-r1 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...

CLEANSTART-2026-VT46196 Security fixes in atlantis-fips 0.45.0-r1

Package atlantis-fips version 0.45.0-r1 fixes 1 vulnerabilities: CVE-2026-56864...

CLEANSTART-2026-DZ45567 Security fixes in atlantis-fips 0.45.0-r2

Package atlantis-fips version 0.45.0-r2 fixes 1 vulnerabilities: CVE-2026-56864...

CLEANSTART-2026-BN39310 Security fixes in atlantis-fips 0.47.1-r1

Package atlantis-fips version 0.47.1-r1 fixes 10 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-KF38495 Security fixes in atlantis 0.45.0-r1

Package atlantis version 0.45.0-r1 fixes 1 vulnerabilities: CVE-2026-56864...

CLEANSTART-2026-VB57994 Security fixes in atlantis-fips 0.44.1-r1

Package atlantis-fips version 0.44.1-r1 fixes 1 vulnerabilities: CVE-2026-56864...

CLEANSTART-2026-MJ04112 Security fixes in atlantis 0.44.1-r0

Package atlantis version 0.44.1-r0 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...

CVE-2026-82282

Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to access GitHub App credentials. Attackers can observe or intercept the GitHub redirect during setup to obtain the RSA private key and webhook secret, enabling installation token...

CVE-2026-82282

Atlantis (through version 0.47.1 ) contains an authentication bypass in the /github-app/setup endpoint. The endpoint fails to require authentication, allowing unauthenticated callers to observe or intercept the GitHub redirect during app setup and extract the RSA private key and webhook secret . ...

CVE-2026-82282 Atlantis GitHub App Setup Endpoint Returns App Credentials to Unauthenticated Callers

Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to access GitHub App credentials. Attackers can observe or intercept the GitHub redirect during setup to obtain the RSA private key and webhook secret, enabling installation token...

CVE-2026-82282 Atlantis GitHub App Setup Endpoint Returns App Credentials to Unauthenticated Callers

Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to access GitHub App credentials. Attackers can observe or intercept the GitHub redirect during setup to obtain the RSA private key and webhook secret, enabling installation token...

EUVD-2026-67813

Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to access GitHub App credentials. Attackers can observe or intercept the GitHub redirect during setup to obtain the RSA private key and webhook secret, enabling installation token...

GO-2026-6273 Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis

Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis...

CVE-2026-64679

creationtimestamp| type| source ---|---|--- 2026-08-21 22:35:19+00:00| published-proof-of-concept| https://github.com/runatlantis/atlantis/security/advisories/GHSA-26w5-6g95-gj28 2026-08-22 02:01:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtn6l3hsty2o 2026-08-22...

CVE-2026-64679

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From 0.19.8 until 0.45.0, Atlantis does not consistently validate user-controlled workspace values supplied through accepted repository-level atlantis.yaml configuration or authenticated...

GHSA-26W5-6G95-GJ28 Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation

Summary Atlantis versions = 0.19.8 and 0.45.0 did not consistently validate user-controlled workspace values before using them to construct local workspace paths. A crafted workspace value containing path traversal segments could cause Atlantis to resolve workspace paths outside the intended...