Topic	Replies	Views	Activity
HCSEC-2026-31 - Go-slug vulnerable to exclusion bypass in .terraformignore handling Security security-terraform	0	198	August 20, 2026
HCSEC-2026-23 - Multiple vulnerabilities impacting HashiCorp Terraform MCP Server Security security-terraform	0	1052	July 28, 2026
HCSEC-2026-17 - Terraform Enterprise vulnerable to arbitrary file read Security security-terraform	0	601	July 6, 2026
HCSEC-2026-09 - Remediation and Improved Secret Management for GitHub Webhook Secret Exposure Security security-terraform	0	506	April 20, 2026
HCSEC-2025-33 - Vault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method Security security-vault , security-terraform	0	1521	November 21, 2025
HCSEC-2025-34 - Terraform Enterprise state versions can be created by users without sufficient write access Security security-terraform	0	609	November 21, 2025
HCSEC-2025-05 - Terraform Enterprise’s Single Sign-On and Ruby SAML’s CVE-2025-25291 and CVE-2025-25292 Security security-terraform	0	836	March 13, 2025
HCSEC-2024-19 - Terraform Enterprise’s Single Sign-On And Ruby SAML’s CVE-2024-45409 Security security-terraform	1	1340	October 21, 2024
HCSEC-2024-04 - Terraform Registry Module Supply Chain Security Improvements Security security-terraform	0	5251	February 15, 2024
HCSEC-2023-27 - Terraform Allows Arbitrary File Write During Init Operation Security security-terraform	0	9686	September 8, 2023
HCSEC-2023-26 - Terraform’s Handling Of Duplicate Map Keys In Configurations May Have Security Implications Security security-terraform	0	7482	August 24, 2023
HCSEC-2023-19 - Terraform Enterprise, Docker Engine, and Go’s CVE-2023-24540 Security security-terraform	1	7175	June 28, 2023
HCSEC-2023-18 - Terraform Enterprise Agent Pool Controls Allowed Unauthorized Workspaces to Target an Agent Pool Security security-terraform	0	6231	June 22, 2023
HCSEC-2022-06 - Terraform Enterprise May Capture Sensitive Data In Logs Security security-terraform	0	7761	February 24, 2022
HCSEC-2021-25 - Terraform Enterprise Configuration Versions API Discloses Sensitive URL Security security-terraform	0	7395	September 14, 2021
HCSEC-2021-18 - Terraform Enterprise Allowed Privilege Escalation Via Run Token Security security-terraform	0	7566	July 20, 2021
HCSEC-2021-12 - Codecov Security Event and HashiCorp GPG Key Exposure Security security-nomad , security-consul , security-vault , security-terraform	2	67484	May 4, 2021
HCSEC-2021-11 - Terraform’s Vault Provider Did Not Correctly Configure Bound Labels for GCP Auth Security security-vault , security-terraform	0	8228	April 21, 2021
HCSEC-2021-06 - Terraform Enterprise Organization-Level MFA Requirement Was Not Enforced Security security-terraform	0	7548	March 23, 2021
HCSEC-2020-15 - Terraform Enterprise Allowed Local Account Creation Bypassing SSO Security security-terraform	0	5064	November 25, 2020

security-terraform