CVE-2026-48032
2026-07-24
19h16 +00:00
19h16 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, IAM-role policy checks can be bypassed when the role trusts multiple OIDC providers. This issue has been patched in version 1.4.0.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Incorrect Comparison The product compares two entities in a security-relevant context, but the comparison is incorrect. |
