Repository navigation
Security: gruntwork-io/terragrunt
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Provider cache server allows local processes to use the operator's registry credentialsGHSA-hcvx-6gpv-2x44 published
Oct 15, 2026 by yhakbarLow -
CAS Git source `ref` values can execute local commands through `git fetch`GHSA-mgh6-c957-m897 published
Oct 1, 2026 by yhakbarLow -
Engine ZIP archive extraction has no size or file-count limitsGHSA-qchr-fph4-5x9f published
Sep 24, 2026 by yhakbarLow -
Terragrunt catalog predictable temp symlink clobberGHSA-wv6g-x823-wx9m published
Sep 22, 2026 by yhakbarLow -
Arbitrary File Deletion via Malicious Module ManifestGHSA-8394-6f8r-whxg published
Aug 3, 2026 by yhakbarModerate