CVE-2026-65618 Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data...

CVE-2025-11065 affecting package terraform for versions less than 1.3.2-29

CVE-2025-11065 affecting package terraform for versions less than 1.3.2-29. A patched version of the package is available...

CVE-2025-58058 affecting package terraform for versions less than 1.3.2-27

CVE-2025-58058 affecting package terraform for versions less than 1.3.2-27. A patched version of the package is available...

CVE-2024-24786 affecting package terraform for versions less than 1.3.2-20

CVE-2024-24786 affecting package terraform for versions less than 1.3.2-20. A patched version of the package is available...

AZL-39939 CVE-2024-3817 affecting package terraform for versions less than 1.3.2-14

HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. This vulnerability does not affect the go-getter/v2 branch and package...