CVE-2026-48033:詳細資料

CVE-2026-48033

2026-07-24
19h16 +00:00
2026-10-24
13h10 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, policy packs can be bypassed by a forged Pulumi-URN logical name. This issue has been patched in version 1.4.0.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-693 Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

參考資料