Skip to content
OpenAdvisories

Package · Go

github.com/gruntwork-io/terragrunt

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.4
    CVE-2026-64672

    Terragrunt catalog predictable temp symlink clobber

    Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.1.1, the terragrunt catalog command derives a predictable per-repository catalog clone root under the shared system temporary …

    gruntwork-io terragrunt github.com/gruntwork-io/terragrunt Go
  • Medium 6.9
    CVE-2026-45099

    Terragrunt: Arbitrary File Deletion via Malicious Module Manifest

    Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.0.4, Terragrunt trusts paths decoded from a downloaded module's .terragrunt-module-manifest during fileManifest.Clean() in int…

    gruntwork-io terragrunt github.com/gruntwork-io/terragrunt Go