PT-2026-42295 · Cleanstart · Terragrunt-Fips

Publicado 2026-04-09 · Atualizado 2026-04-09

OSV

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Multiple security vulnerabilities affect the terragrunt-fips package. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. See references for individual vulnerability details.

Correção

Identificadores relacionados

CLEANSTART-2026-TN07413

Produtos afetados

Terragrunt-Fips

Referências · 34

• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TN07413.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-27139 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-27142 · Nota de Segurança
• https://osv.dev/vulnerability/ghsa-6g7g-w4f8-9c9x · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-47913 · Nota de Segurança
• https://osv.dev/vulnerability/ghsa-p77j-4mvh-x3m3 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-24051 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-34986 · Nota
• https://osv.dev/vulnerability/CVE-2025-47914 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-61729 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-25679 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-26958 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-1229 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-33186 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-26958 · Nota de Segurança