checkov

Checkov 는 인프라스트럭처 애즈 코드IaC를 위한 정적 코드 분석 도구이자, 이미지 및 오픈 소스 패키지를 위한 소프트웨어 구성 분석SCA 도구입니다. Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize, Dockerfile, Serverless, Bicep, OpenAPI, ARM Templates 또는 OpenTofu를 사용하여 프로비저닝된 클라우드 인프라를 스캔하고, 그래프 기반 스캔을 통해 보안 및 규정 준수 설...

terragoat

TerraGoat - Vulnerable Terraform Infrastructure TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find the...

CVE-2026-0303

Checkov 任意コード実行 CVE-2026-0303 CVE: CVE-2026-0303 | CVSS 基本値: 6.3 | 深刻度: 低 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H CVE-2026-0303 - Checkov における任意コード実行の脆弱性。 2026年9月9日に Palo Alto Networks により公開。 影響を受けるバージョン: Checkov 3.2.0 から 3.2.531 修正バージョン: Checkov 3.2.532 TLDR 自動読み込みされる...

checkov v3.3.19

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

The vulnerability of the Checkov code analysis tool by Prisma Cloud lies in the fact that functions from an unreliable controlled area can be enabled, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Checkov code analysis tool by Prisma Cloud lies in the inclusion of functions from an unverified controlled area. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

The vulnerability of the Checkov code analysis tool provided by Prisma Cloud lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.

The vulnerability of the Checkov code analysis tool by Prisma Cloud lies in the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows attackers to execute arbitrary commands...

CVE-2026-76220 vulnerabilities

Vulnerabilities for packages: checkov, opal, mlflow, awx...

CVE-2026-76220 vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

CVE-2026-0303

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

CVE-2026-0302

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...

CVE-2026-0302

CVE-2026-0302 is currently a reserved candidate with no public technical details available in the provided documents. Monitor for updates once the reserving organization publishes further information.

CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...

EUVD-2026-75270

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...

CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...

CVE-2026-0303

CVE-2026-0303 is currently reserved with no public technical details available. The affected product, root cause, and impact are not yet disclosed. Monitor for updates when the holder publicizes the vulnerability.

CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

EUVD-2026-75269

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

CVE-2026-0303: Inclusion of Functionality from Untrusted Control Sphere

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

CVE-2026-0302: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...