Skip to content
OpenAdvisories

Vendor

gruntwork-io

2 known vulnerabilities.

Products

terragrunt 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-64672

    Terragrunt catalog predictable temp symlink clobber

    Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.1.1, the terragrunt catalog command derives a predictable per-repository catalog clone root under the shared system temporary …

    gruntwork-io terragrunt github.com/gruntwork-io/terragrunt Go
  • Medium 6.9
    CVE-2026-45099

    Terragrunt: Arbitrary File Deletion via Malicious Module Manifest

    Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.0.4, Terragrunt trusts paths decoded from a downloaded module's .terragrunt-module-manifest during fileManifest.Clean() in int…

    gruntwork-io terragrunt github.com/gruntwork-io/terragrunt Go