Kerberosmansour

9 CVEs across 1 Kerberosmansour products. Browse Kerberosmansour vulnerabilities, severities, and proof-of-concept exploits.

Kerberosmansour products with known CVEs

ProductCVEs
Hulumi9
Kerberosmansour CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-82862High8.42026-08-31Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root, allowing workspace files to shadow the intended helper script. Attack…
CVE-2026-82859Critical9.82026-08-31hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intend…
CVE-2026-82857Critical9.82026-08-31hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that allows role lifecycle operations on af-e2e…
CVE-2026-480372026-07-24Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, AccountFoundatio…
CVE-2026-480362026-07-24Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, consumers runnin…
CVE-2026-480352026-07-24Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, consumers using…
CVE-2026-480342026-07-24Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, there is a bypas…
CVE-2026-480332026-07-24Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, policy packs can…
CVE-2026-480322026-07-24Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, IAM-role policy…