Description
Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PacoVK | tapir | >= 0.9.0, < 0.9.2 | — |