terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry Un módulo de Terraform para configurar tu cuenta de AWS con una línea base de seguridad razonablemente segura. La mayoría de las configuraciones se basan en CIS Amazon Web Services Foundations v1.4.0 y AWS Foundational Security Best Practice...

domain-protect

OWASP Domain Protect - trasladado OWASP Domain Protect se ha trasladado a terraform-aws-domain-protect OWASP Domain Protect ahora está disponible como un Módulo de Terraform Consulte la documentación de OWASP Domain Protect incluyendo opciones de migración...

Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi-fips, prometheus, syft-fips, crossplane-provider-aws-rolesanywhere-fips, rootlesskit, crossplane-provider-aws-organizations-fips, vitess, crossplane-provider-aws-cloudformation, crossplane-provider-aws-redshiftserverless-fips,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: lazydocker, argo-rollouts, k8ssandra-client, k3s, trivy, go, jitsucom-bulker, temporal, sftpgo-plugin-auth, azure-service-operator, kubernetes-csi-driver-nfs, rancher-fleet, timoni, tofu-controller, falcoctl, verticadb-operator, mattermost,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-aws, flux-operator-fips, flux-kustomize-controller-fips, crossplane-provider-aws-rolesanywhere-fips, crossplane-provider-aws-sns, sops, kubo-fips, crossplane-provider-aws-cloudformation, bento-fips, nemo, crossplane-provider-aws-ecr,...

Malicious code in @terraform-aws-github-runner/gh-agent-syncer (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @terraform-aws-github-runner/aws-ssm-uti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e8dee05678c6b03df102e495749bdc9db8ae73a32752a0f85345cc637577012 The OpenSSF Package Analysis project identified '@terraform-aws-github-runner/aws-ssm-uti' @ 1.999.0 npm as malicious. It is considered maliciou...

PT-2023-36264 · Hashicorp · Terraform-Provider-Aws

Name of the Vulnerable Software and Affected Versions: terraform-provider-aws affected versions not specified Description: The issue is related to a security release in the Go programming language, version 1.21. The terraform-provider-aws package has been rebuilt to incorporate this security...

CVE-2018-9057

aws/resourceawsiamuserloginprofile.go in the HashiCorp Terraform Amazon Web Services AWS provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password...