kerberosmansour vulnerabilities

Newest CVEs

• CVE-2026-82862

  Hulumi before v1.3.2 Helper Script Shadowing via Workspace Files

  kerberosmansour · hulumi

  High8.6
• CVE-2026-82859

  hulumi before v1.3.2 SCP Template Tag-on-Create Bypass

  kerberosmansour · hulumi

  Critical9.3
• CVE-2026-82857

  hulumi before v1.3.2 Privilege Escalation via IAM Policy

  kerberosmansour · hulumi

  Critical9.3
• CVE-2026-48037

  Hulumi: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture

  kerberosmansour · hulumi

  Medium6.3
• CVE-2026-48036

  Hulumi: Drift classifier fails open on adapter errors and over-promotes Mixed verdicts

  kerberosmansour · hulumi

  High8.4
• CVE-2026-48035

  Hulumi: AccountFoundation audit-delivery S3 bucket could be silently weakened

  kerberosmansour · hulumi

  High7.1
• CVE-2026-48033

  Hulumi: Policy packs bypassed by a forged Pulumi-URN logical name

  kerberosmansour · hulumi

  High8.4
• CVE-2026-48032

  Hulumi: IAM-role policy checks bypassed when the role trusts multiple OIDC providers

  kerberosmansour · hulumi

  High8.3
• CVE-2026-48034

  HULUMI-H5 bypass via decoy sibling resources targeting a different bucket

  kerberosmansour · hulumi

  High8.5