kerberosmansour hulumi

• CVE-2026-82862 High 8.4 Hulumi before v1.3.2 Helper Script Shadowing via Workspace Files 0.2%
• CVE-2026-82859 Critical 9.8 hulumi before v1.3.2 SCP Template Tag-on-Create Bypass 0.5%
• CVE-2026-82857 Critical 9.8 hulumi before v1.3.2 Privilege Escalation via IAM Policy 0.5%
• CVE-2026-48037 Medium 6.3 Hulumi: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture 0.5%
• CVE-2026-48036 High 8.4 Hulumi: Drift classifier fails open on adapter errors and over-promotes Mixed verdicts 0.5%
• CVE-2026-48035 High 7.1 Hulumi: AccountFoundation audit-delivery S3 bucket could be silently weakened 0.5%
• CVE-2026-48033 High 8.4 Hulumi: Policy packs bypassed by a forged Pulumi-URN logical name 0.5%
• CVE-2026-48032 High 8.3 Hulumi: IAM-role policy checks bypassed when the role trusts multiple OIDC providers 0.5%
• CVE-2026-48034 High 8.5 HULUMI-H5 bypass via decoy sibling resources targeting a different bucket 0.4%