Vulnerability GO-2025-3940
Advisory details are being prepared in the background.
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
September 17, 2025 at 05:03 PM UTC
Atlantis Exposes Service Version Publicly on /status API Endpoint in github.com/runatlantis/atlantis
v0.1.0 - v0.49.0
v0.1.0 - v0.49.0
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
OS command injection through PR-controlled Terraform workspace enables RCE during plan in github.com/runatlantis/atlantis
v0.4.0 - v0.47.0 GO-2026-6871
v0.4.0 - v0.47.0 GO-2026-6871
High Risk
9 days ago
Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
v0.4.0 - v0.47.0 GHSA-rjh2-4xgw-p2hj
v0.4.0 - v0.47.0 GHSA-rjh2-4xgw-p2hj
Unknown
2 months ago
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis
v0.19.8 - v0.44.1 GO-2026-6273
v0.19.8 - v0.44.1 GO-2026-6273
High Risk
2 months ago
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation
v0.19.8 - v0.44.1 GHSA-26w5-6g95-gj28
v0.19.8 - v0.44.1 GHSA-26w5-6g95-gj28
High Risk
1 year ago
Atlantis Exposes Service Version Publicly on /status API Endpoint
v0.1.0 - v0.35.1 GHSA-xh7v-965r-23f7
v0.1.0 - v0.35.1 GHSA-xh7v-965r-23f7
Impacted packages
Timeline
Published
1 year ago
September 17, 2025 at 05:03 PM UTC
Last Modified
9 months ago
February 04, 2026 at 04:05 AM UTC