Vulnerabilidades do Hashicorp Go-slug
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Hashicorp Go-slug: 1 registro(s), com versões afetadas e correções.cpe:2.3:a:hashicorp:go-slug
CVE-2026-14978
Média · 5.5
CWE-176 19/08/2026
Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions
HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching.