terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry AWS アカウントに適切に安全な設定ベースラインを適用するための Terraform モジュールです。 ほとんどの設定は CIS Amazon Web Services Foundations v1.4.0 および AWS Foundational Security Best Practices v1.0.0 に基づいています。 ベンチマーク準拠状況 を参照して、どのベンチマークの項目がカバーされているかを確認してください。 特徴 アイデンティティとアクセス管理 IAM...

domain-protect

OWASP Domain Protect - 移動しました OWASP Domain Protect は terraform-aws-domain-protect に移動しました。 OWASP Domain Protect は Terraform Module として利用可能になりました。 OWASP Domain Protect ドキュメント を参照してください。移行 オプションも含まれています。...

Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: argo-events-fips, caddy-fips, external-dns, kyverno-notation-aws-fips, crossplane-provider-aws-kafka, crossplane-provider-aws-organizations-fips, etcd, knative-kafka-broker-fips, cilium, crossplane-provider-azure-search, buildkitd, datadog-agent-fips,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, aactl, memcached-exporter, docker-machine-driver-harvester, libnvidia-container, kubernetes-csi-livenessprobe, kubeflow-katib, kubernetes-event-exporter, falcoctl, k3s, bank-vaults, eksctl, gh, kine, aws-flb-firehose, migrate,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: crossplane-provider-terraform, caddy-fips, polaris, crossplane-provider-aws-kinesis-fips, grafana-mimir, splunk-otel-collector-fips, external-dns, gitlab-cng, crossplane-provider-aws-cloudfront-fips, crossplane-provider-aws-ecr, aws-ebs-csi-driver-fips, pluto-fips,...

Malicious code in @terraform-aws-github-runner/gh-agent-syncer (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @terraform-aws-github-runner/aws-ssm-uti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e8dee05678c6b03df102e495749bdc9db8ae73a32752a0f85345cc637577012 The OpenSSF Package Analysis project identified '@terraform-aws-github-runner/aws-ssm-uti' @ 1.999.0 npm as malicious. It is considered maliciou...

PT-2023-36264 · Hashicorp · Terraform-Provider-Aws

Name of the Vulnerable Software and Affected Versions: terraform-provider-aws affected versions not specified Description: The issue is related to a security release in the Go programming language, version 1.21. The terraform-provider-aws package has been rebuilt to incorporate this security...

CVE-2018-9057

aws/resourceawsiamuserloginprofile.go in the HashiCorp Terraform Amazon Web Services AWS provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password...