Skip to content
OpenAdvisories

Package · npm

@hulumi/drift

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2026-48036

    Hulumi: Drift classifier fails open on adapter errors and over-promotes Mixed verdicts

    Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, consumers running drift detection in CI / cron could see transient adapter failures silently cached as "all clear" —…

    kerberosmansour hulumi @hulumi/drift npm