Hello,
We would like to enquire on the following vulnerabilities that have been flagged in the latest terraform version 1.5.7 and 1.7.5. We are already on the latest version for both terraform but these CVE’s are still flagged after our scans and would like to know if there are any plans to fix it in the future. Below are the list of vulnerabilities for both the versions:
Terraform 1.5
- CVE-2023-39318
- CVE-2023-39319
- CVE-2023-39325
- CVE-2023-39326
- CVE-2023-3978
- CVE-2023-44487
- CVE-2023-45283
- CVE-2023-45284
- CVE-2023-45288
- CVE-2023-45289
- CVE-2023-45290
- CVE-2024-24783
- CVE-2024-24784
- CVE-2024-24786
- CVE-2024-3817
- GHSA-m425-mq94-257g
Terraform 1.7
- CVE-2023-45288
- CVE-2024-24786
- CVE-2024-3817
- GHSA-9763-4f94-gfch
3 posts - 2 participants