runatlantis atlantis

• CVE-2026-116676 High 8.8 Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan 0.5%
• CVE-2026-82282 High 8.0 Atlantis GitHub App Setup Endpoint Returns App Credentials to Unauthenticated Callers 0.4%
• CVE-2026-64679 High 8.1 Atlantis: Path Traversal in Atlantis Workspace Handling Allows Out-of-Bounds Directory Deletion/Creation 0.8%
• CVE-2025-58445 Medium 6.9 Atlantis Exposes Service Version Publicly on /status API Endpoint 0.5%
• CVE-2024-52009 High 8.5 Git credentials are exposed in atlantis logs 0.7%