84 matches found
GHSA-8394-6F8R-WHXG Terragrunt: Arbitrary File Deletion via Malicious Module Manifest
Summary Terragrunt is vulnerable to an arbitrary file deletion flaw when downloading external modules. If a remote module contains a maliciously crafted .terragrunt-module-manifest file, Terragrunt can be tricked into deleting files anywhere on the local filesystem that the Terragrunt process has...
PT-2026-76888
Summary Terragrunt is vulnerable to an arbitrary file deletion flaw when downloading external modules. If a remote module contains a maliciously crafted .terragrunt-module-manifest file, Terragrunt can be tricked into deleting files anywhere on the local filesystem that the Terragrunt process has...
GO-2024-2948 vulnerabilities
Vulnerabilities for packages: zarf, terragrunt, k9s, wolfictl, kots, conftest, zot, tfsec, snyk-cli, tflint, trivy, trivy-fips, terraform, conftest-fips, kubescape, grype...
GO-2024-2698 vulnerabilities
Vulnerabilities for packages: zarf, terragrunt, k9s, wolfictl, kots, nuclei, filebrowser, mattermost-fips, gotenberg, vault, kubescape, chainctl...
GO-2026-5490 vulnerabilities
Vulnerabilities for packages: seaweedfs-rocksdb-fips, upwind-agent, flux, flux-fips, packer-fips, terragrunt, cerbos-fips, external-secrets-operator, gitaly, packer, external-secrets-operator-fips, argo-cd-fips, gitlab-rails-ce, amazon-ssm-agent, grafana-fips, rancher-fleet-fips, syft,...
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: cluster-autoscaler-fips, victoriametrics, aws-ebs-csi-driver, terragrunt, flux-fips, flux-image-automation-controller, aws-ebs-csi-driver-fips, flux-helm-controller, victoriametrics-fips, victoriametrics-cluster, amazon-k8s-cni-fips, grafana-fips,...
GO-2025-3922 vulnerabilities
Vulnerabilities for packages: nuclei, podman, terragrunt, zot, filebrowser, grafana-alloy, rancher-fleet, nsc, kubescape-operator, trufflehog, envoy-gateway, trivy, steampipe, terraform, zarf, gitness, trivy-operator, gitleaks, xeol, k9s, opentofu, undock, tflint, guac, vcluster, gptscript...
GO-2024-2698 vulnerabilities
Vulnerabilities for packages: nuclei, wolfictl, kots, terragrunt, filebrowser, kubescape, k9s, zarf...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: nuclei, rclone, datadog-agent, terragrunt, gitlab-runner, minio, tempo, grafana-alloy, kubevela, malcontent, mcp-grafana, dgraph, k8sgpt, goreleaser, k3s, dagger, prometheus, cri-tools, opentelemetry-collector, teleport, witness, opentelemetry-collector-contrib,...
GO-2026-5058 vulnerabilities
Vulnerabilities for packages: snyk-cli, terragrunt, zot, kots, trivy, steampipe, zarf, terraform, wolfictl, task, syft, trivy-operator, conftest, xeol, k9s, opentofu, grype, tfsec, tflint, kubescape...
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: terragrunt, flux-source-controller, victoriametrics-cluster, go, dkron, steampipe, flux-notification-controller, nova, grafana-operator, flux-image-automation-controller, podinfo, stakater-reloader, pluto, metacontroller, polaris, flux-helm-controller,...
GO-2026-4599 vulnerabilities
Vulnerabilities for packages: terragrunt, flux-source-controller, victoriametrics-cluster, go, dkron, steampipe, flux-notification-controller, nova, grafana-operator, flux-image-automation-controller, podinfo, stakater-reloader, pluto, metacontroller, polaris, flux-helm-controller,...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: grpc-health-probe, sigstore-scaffolding, smarter-device-manager, falcosidekick, terragrunt, zot, minio, k3d, tempo, spegel, cloudnative-pg, terraform-docs, k8sgpt, dbmate, hubble-ui, rqlite, kots, opa, k3s, dagger, kargo, certificate-transparency, trivy, spire-server...
GO-2026-5597 vulnerabilities
Vulnerabilities for packages: telegraf, external-secrets-operator, cerbos, syft, rclone, terragrunt, rancher-fleet, argo-cd, gitaly, scorecard, teleport...
GO-2026-5490 vulnerabilities
Vulnerabilities for packages: telegraf, external-secrets-operator, cerbos, syft, rclone, terragrunt, rancher-fleet, argo-cd, gitaly, scorecard, flux, teleport...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: nuclei, bank-vaults, thanos, sigstore-scaffolding, rclone, falcoctl, terragrunt, druid, zot, cortex, argo-events, flux-source-controller, rekor, tempo, trino, chezmoi, timestamp-authority, k8sgpt, tekton-chains, velero, goreleaser, flux-kustomize-controller,...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: aactl, terragrunt, oauth2-proxy, slsa-verifier, flux-source-controller, rekor, tekton-chains, kots, vexctl, flux-kustomize-controller, spire-server, tkn, gitsign, argo-workflows, cosign, dex, cloudflared, kubescape, fulcio, sops...
GO-2024-2631 vulnerabilities
Vulnerabilities for packages: grpc-health-probe, bank-vaults, sigstore-scaffolding, rabbitmq-messaging-topology-operator, aactl, falcoctl, terragrunt, oauth2-proxy, zot, minio, frp, slsa-verifier, flux-source-controller, skaffold, rekor, timestamp-authority, dgraph, tekton-chains, goreleaser, kot...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: nuclei, bank-vaults, sigstore-scaffolding, terraform-provider-azurerm, rabbitmq-messaging-topology-operator, neuvector-sigstore-interface, aactl, falcoctl, snyk-cli, terragrunt, zot, slsa-verifier, argo-events, flux-source-controller, k3d, rekor,...