github.com/runatlantis/atlantis
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan | github.com/runatlantis/atlantis | Go | High | Fix reported | |
| Atlantis Exposes Service Version Publicly on /status API Endpoint | github.com/runatlantis/atlantis | Go | Low | No fix reported | |
| Atlantis Events vulnerable to Timing Attack | github.com/runatlantis/atlantis | Go | High | Fix reported | |
| Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation | github.com/runatlantis/atlantis | Go | High | Fix reported | |
| Git credentials are exposed in Atlantis logs | github.com/runatlantis/atlantis | Go | High | Fix reported |