EUVD-2025-24606

Malicious code in bioql PyPI...

CVE-2025-2180

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...

PT-2025-33020 · Palo Alto Networks · Prisma Cloud +1

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Checkov by Prisma® Cloud versions prior to 3.2.415 Description: An unsafe deserialization issue in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non-administrative...

PT-2021-18726

Name of the Vulnerable Software and Affected Versions Checkov versions 2.0.0 through 2.0.138 Description An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. Recommendations For Checkov versions...

Deserialization of untrusted data

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

PT-2021-18716

Name of the Vulnerable Software and Affected Versions Checkov versions prior to 2.0.26 Description An unsafe deserialization issue allows arbitrary code execution when processing a malicious terraform file. Recommendations For versions prior to 2.0.26, update to version 2.0.26 or later to resolve...

Bridgecrew Checkov Has a Remote Code Execution Vulnerability

checkov a software application. Static code analysis tool for infrastructure i.e. code. Bridgecrew Checkov suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code while processing a malicious terraform file...

Bridgecrew Checkov 代码问题漏洞

checkov a software application. Static code analysis tool for infrastructure i.e. code. Bridgecrew Checkov suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code while processing a malicious terraform file...