hulumi

Products

ProductCVEsExploitedLatest
policies4–Aug 31, 2026
baseline1–Aug 31, 2026
drift1–Aug 31, 2026

Exploited and recent CVEs

  • CVE-2026-82863 Low 3.3 @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection 0.2%
  • CVE-2026-82861 High 7.5 @hulumi/policies before 1.3.2 SecureBucket Parent Spoof Bypass 0.4%
  • CVE-2026-82860 Critical 9.8 @hulumi/policies before 1.3.2 Admin Policy Bypass 0.5%
  • CVE-2026-82858 Critical 9.8 @hulumi/drift before 1.3.2 Unsafe Execute Plan Acceptance 0.3%
  • CVE-2026-82856 Critical 9.8 @hulumi/policies before 1.3.2 OIDC Trust Policy Bypass 0.5%
  • CVE-2026-82855 Critical 9.8 @hulumi/policies before 1.3.2 Evidence Validation Bypass 0.6%