Login Request a demo
TE
Product
Terraform
by Hashicorp · last CVE Nov 21, 2025
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 3Medium 1Low 0
Severity
All severities5Critical1High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Terraform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-36230
8.8
1%
Jul 20
HashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization checks on a subset of API requests executed using the run token, allowing privilege…
Affected: before 202107-1
CVE-2023-4782
7.8
0%
Sep 8
Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously crafted Terraform configuration
Affected: 1.0.8 before 1.5.7
CVE-2019-19316
7.5
1%
Dec 2
When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP
Affected: before 0.12.17
Showing 3