CVE Intelligence

Hashicorp Go-slug vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Hashicorp Go-slug: 1 record(s), with affected versions and fixes.
cpe:2.3:a:hashicorp:go-slug

CVE-2026-14978 Medium · 5.5 CWE-176 Aug 19, 2026
Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions
HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching.