Skip to content
OpenAdvisories

Vendor

hulumi

6 known vulnerabilities.

Products

policies 4 drift 1 baseline 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-82861

    @hulumi/policies before 1.3.2 SecureBucket Parent Spoof Bypass

    @hulumi/policies versions before 1.3.2 contain a parent spoof bypass vulnerability that allows attackers to submit spoofed SecureBucket parent evidence during policy evaluation. Attackers can bypass security policy checks by providing falsified evidence, caus…

    hulumi policies @hulumi/policies npm