EUVD-2024-55625

updatediskpsubaseline.sh requires password in plain text...

CVE-2024-39575

updatediskpsubaseline.sh requires password in plain text...

CVE-2024-39575

updatediskpsubaseline.sh requires password in plain text...

CVE-2024-39575

Technical details are not publicly available in the provided documents; monitor for updates.

PT-2026-49747

update disk psu baseline.sh requires password in plain text...

Security Misconfiguration

@hulumi/baseline is vulnerable to Security Misconfiguration. The vulnerability is due to AccountFoundation reuse paths silently downgrading GuardDuty and Security Hub security settings, which allows an attacker to operate with reduced detection and monitoring capabilities in the affected...

CVEAlertor

CVEAlertor Get an instant Telegram alert the moment a new C...

@hulumi/platform-patterns (>=0.0.0-bootstrap.0, <=1.3.2) potentially affected by CVE-2026-48037 via @hulumi/baseline (>=1.3.1, <=1.3.2)

@hulumi/baseline NPM version =1.3.1, =0.0.0-bootstrap.0, =1.3.2 Source cves: CVE-2026-48037 Source advisory: SNYK:JS-HULUMIBASELINE-17660551...

@hulumi/baseline: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture

Affected: @hulumi/baseline 1.4.0 — Fixed in: 1.4.0 — Severity: Medium — CWE-693 Protection Mechanism Failure Summary AccountFoundation can either create AWS detective services GuardDuty for threat detection, Security Hub for compliance dashboards or reuse pre-existing ones via opt-in flags. The...

@hulumi/platform-patterns (>=0.0.0-bootstrap.0, <=1.3.2) potentially affected by CVE-2026-48037 via @hulumi/baseline (>=1.3.1, <=1.3.2)

@hulumi/baseline NPM version =1.3.1, =0.0.0-bootstrap.0, =1.3.2 Source cves: CVE-2026-48037 Source advisory: OSV:GHSA-CJ8G-PRCM-MFG5...

Protection Mechanism Failure

Overview @hulumi/baseline is a Hardened Pulumi baseline components for AWS and GitHub — SecureBucket, AccountFoundation, AWS organization guardrails, secure primitives, detection foundations, SecureRepository, OrgFoundation. SLSA Build L3 attestation on every release. Affected versions of this...

GHSA-2MXR-P26X-MJ73 @hulumi/baseline: AccountFoundation audit-delivery S3 bucket could be silently weakened

Affected: @hulumi/baseline 1.4.0 — Fixed in: 1.4.0 — Severity: High — CWE-1059 Insufficient Technical Documentation / Behavioral Inconsistency Summary The S3 bucket that AccountFoundation creates to receive CloudTrail and AWS Config audit logs is meant to be tamper-resistant — if someone with...

@hulumi/baseline: AccountFoundation audit-delivery S3 bucket could be silently weakened

Affected: @hulumi/baseline 1.4.0 — Fixed in: 1.4.0 — Severity: High — CWE-1059 Insufficient Technical Documentation / Behavioral Inconsistency Summary The S3 bucket that AccountFoundation creates to receive CloudTrail and AWS Config audit logs is meant to be tamper-resistant — if someone with...

@hulumi/platform-patterns (>=0.0.0-bootstrap.0, <=1.3.2) potentially affected by CVE-2026-48035 via @hulumi/baseline (>=1.3.1, <=1.3.2)

@hulumi/baseline NPM version =1.3.1, =0.0.0-bootstrap.0, =1.3.2 Source cves: CVE-2026-48035 Source advisory: SNYK:JS-HULUMIBASELINE-17660549...

@hulumi/platform-patterns (>=0.0.0-bootstrap.0, <=1.3.2) potentially affected by CVE-2026-48035 via @hulumi/baseline (>=1.3.1, <=1.3.2)

@hulumi/baseline NPM version =1.3.1, =0.0.0-bootstrap.0, =1.3.2 Source cves: CVE-2026-48035 Source advisory: OSV:GHSA-2MXR-P26X-MJ73...

PT-2026-48479

Name of the Vulnerable Software and Affected Versions @hulumi/baseline versions prior to 1.4.0 Description In the AccountFoundation component, reuse paths for AWS detective services can lead to a downgraded security posture. When reusing GuardDuty, the system fails to verify if the existing...

terraform-aws-wafacl-golden

terraform-aws-wafacl-golden !Terraformhttps://img.shields...

Quality-Diversity Evolution for Discovering Diverse Vulnerabilities in LLM Safety

Current approaches to LLM adversarial testing suffer from coverage gaps: manual red-teaming does not scale, LLM-as-attacker methods exhibit mode collapse, and gradient-based approaches produce uninterpretable gibberish. We introduce a quality-diversity evolutionary framework that operates at the...

@hulumi/platform-patterns (0.0.0-bootstrap.0) potentially affected by unknown CVE via @hulumi/baseline (1.3.1)

@hulumi/baseline NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hulumi/baseline and may be impacted: - @hulumi/platform-patterns 0.0.0-bootstrap.0 Source cves: unknown CVE Source advisory: SNYK:JS-HULUMIBASELINE-17660557...

@hulumi/platform-patterns (0.0.0-bootstrap.0) potentially affected by CVE-2026-82863 via @hulumi/baseline (1.3.1)

@hulumi/baseline NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hulumi/baseline and may be impacted: - @hulumi/platform-patterns 0.0.0-bootstrap.0 Source cves: CVE-2026-82863 Source advisory: OSV:GHSA-GFP8-MP24-5VXG...