Deserialization of Untrusted Data

Overview checkov is an Infrastructure as code static analysis Affected versions of this package are vulnerable to Deserialization of Untrusted Data via use of eval. An attacker can execute arbitrary code by submitting a specially crafted Terraform file for analysis. This is only exploitable if th...