PT-2026-42295 · Cleanstart · Terragrunt-Fips

Published 2026-04-09 · Updated 2026-04-09

OSV

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Multiple security vulnerabilities affect the terragrunt-fips package. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. See references for individual vulnerability details.

Fix

Related Identifiers

CLEANSTART-2026-TN07413

Affected Products

Terragrunt-Fips

References · 34

• https://nvd.nist.gov/vuln/detail/CVE-2026-27139 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-27142 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-47913 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-24051 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-61729 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-25679 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-1229 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33186 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-26958 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-47914 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-TN07413 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58181 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34986 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-61727 · Security Note
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TN07413.json · Note