What’s Vulnerable › Products

hulumi policies vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your hulumi policies version is affected

Latest hulumi policies vulnerabilities

• CVE-2026-82861 — @hulumi/policies before 1.3.2 SecureBucket Parent Spoof Bypass (CVSS 7.5)
• CVE-2026-82860 — @hulumi/policies before 1.3.2 Admin Policy Bypass (CVSS 9.8)
• CVE-2026-82856 — @hulumi/policies before 1.3.2 OIDC Trust Policy Bypass (CVSS 9.8)
• CVE-2026-82855 — @hulumi/policies before 1.3.2 Evidence Validation Bypass (CVSS 9.8)