| Package | Affected versions | Patched versions |
|---|---|---|
| bridgecrew checkov | ≥ 2.0.0, < 2.0.26 | 2.0.26 |
An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free