GHSA-WV6G-X823-WX9M Terragrunt catalog predictable temp symlink clobber

Summary Terragrunt's terragrunt catalog command clones each repository referenced in your catalog configuration into a temporary working directory. In affected versions, the clone path it derived was deterministic and sat under the shared system temporary directory, in the form /catalog-. Because...

Terragrunt catalog predictable temp symlink clobber

Summary Terragrunt's terragrunt catalog command clones each repository referenced in your catalog configuration into a temporary working directory. In affected versions, the clone path it derived was deterministic and sat under the shared system temporary directory, in the form /catalog-. Because...

PT-2026-115367

Name of the Vulnerable Software and Affected Versions Terragrunt versions prior to 1.1.1 Description The terragrunt catalog command clones repositories into a temporary directory using a deterministic path based on a base64 sha1 hash of the repository URL. A local attacker with write access to th...