Kevin Higgs

**Name of the Vulnerable Software and Affected Versions** Checkov versions prior to 2.0.26 **Description** An unsafe deserialization issue allows arbitrary code execution when processing a malicious terraform file. **Recommendations** For versions prior to 2.0.26, update to version 2.0.26 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 78 **Description** The issue is related to Firefox's AppCache behavior when a "%" character followed by "2F" is present in a manifest URL. This could cause the appcache to be used to service requests for the top level directory, potentially allowing a remote attacker to disclose protected information. **Recommendations** For versions prior to 78, update to version 78 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 80.0.3987.87 **Description** The issue is related to an inappropriate implementation in AppCache, allowing a remote attacker to bypass security restrictions. This can be achieved via a crafted HTML page. **Recommendations** For versions prior to 80.0.3987.87, update to version 80.0.3987.87 or later to resolve the issue.