Vulnerability GHSA-xh7v-965r-23f7
Advisory details are being prepared in the background.
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
1 year ago
September 05, 2025 at 09:18 PM UTC
Atlantis Exposes Service Version Publicly on /status API Endpoint
v0.1.0 - v0.35.1
v0.1.0 - v0.35.1
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
OS command injection through PR-controlled Terraform workspace enables RCE during plan in github.com/runatlantis/atlantis
v0.4.0 - v0.47.0 GO-2026-6871
v0.4.0 - v0.47.0 GO-2026-6871
High Risk
9 days ago
Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
v0.4.0 - v0.47.0 GHSA-rjh2-4xgw-p2hj
v0.4.0 - v0.47.0 GHSA-rjh2-4xgw-p2hj
Unknown
2 months ago
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis
v0.19.8 - v0.44.1 GO-2026-6273
v0.19.8 - v0.44.1 GO-2026-6273
High Risk
2 months ago
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation
v0.19.8 - v0.44.1 GHSA-26w5-6g95-gj28
v0.19.8 - v0.44.1 GHSA-26w5-6g95-gj28
Unknown
1 year ago
Atlantis Exposes Service Version Publicly on /status API Endpoint in github.com/runatlantis/atlantis
v0.1.0 - v0.49.0 GO-2025-3940
v0.1.0 - v0.49.0 GO-2025-3940
Impacted packages
Timeline
Published
1 year ago
September 05, 2025 at 09:18 PM UTC
Last Modified
1 month ago
September 10, 2026 at 03:50 AM UTC