Vulnerability GHSA-26w5-6g95-gj28
Advisory details are being prepared in the background.
High Risk
HIGH RISK
CVSS Score: 8.1
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
2 months ago
August 21, 2026 at 08:55 PM UTC
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation
v0.19.8 - v0.44.1
v0.19.8 - v0.44.1
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
10 hours ago
OS command injection through PR-controlled Terraform workspace enables RCE during plan in github.com/runatlantis/atlantis
v0.4.0 - v0.47.0 GO-2026-6871
v0.4.0 - v0.47.0 GO-2026-6871
High Risk
9 days ago
Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
v0.4.0 - v0.47.0 GHSA-rjh2-4xgw-p2hj
v0.4.0 - v0.47.0 GHSA-rjh2-4xgw-p2hj
Unknown
2 months ago
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis
v0.19.8 - v0.44.1 GO-2026-6273
v0.19.8 - v0.44.1 GO-2026-6273
Unknown
1 year ago
Atlantis Exposes Service Version Publicly on /status API Endpoint in github.com/runatlantis/atlantis
v0.1.0 - v0.49.0 GO-2025-3940
v0.1.0 - v0.49.0 GO-2025-3940
High Risk
1 year ago
Atlantis Exposes Service Version Publicly on /status API Endpoint
v0.1.0 - v0.35.1 GHSA-xh7v-965r-23f7
v0.1.0 - v0.35.1 GHSA-xh7v-965r-23f7
Impacted packages
Timeline
Published
2 months ago
August 21, 2026 at 08:55 PM UTC
Fixed (v0.45.0)
4 months ago
June 28, 2026 at 04:21 PM UTC
Last Modified
2 months ago
August 26, 2026 at 01:12 AM UTC