Vulnerability GO-2026-6273
Advisory details are being prepared in the background.
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 months ago
August 25, 2026 at 03:00 PM UTC
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis
v0.19.8 - v0.44.1
v0.19.8 - v0.44.1
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
OS command injection through PR-controlled Terraform workspace enables RCE during plan in github.com/runatlantis/atlantis
v0.4.0 - v0.47.0 GO-2026-6871
v0.4.0 - v0.47.0 GO-2026-6871
High Risk
9 days ago
Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
v0.4.0 - v0.47.0 GHSA-rjh2-4xgw-p2hj
v0.4.0 - v0.47.0 GHSA-rjh2-4xgw-p2hj
High Risk
2 months ago
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation
v0.19.8 - v0.44.1 GHSA-26w5-6g95-gj28
v0.19.8 - v0.44.1 GHSA-26w5-6g95-gj28
Unknown
1 year ago
Atlantis Exposes Service Version Publicly on /status API Endpoint in github.com/runatlantis/atlantis
v0.1.0 - v0.49.0 GO-2025-3940
v0.1.0 - v0.49.0 GO-2025-3940
High Risk
1 year ago
Atlantis Exposes Service Version Publicly on /status API Endpoint
v0.1.0 - v0.35.1 GHSA-xh7v-965r-23f7
v0.1.0 - v0.35.1 GHSA-xh7v-965r-23f7
Impacted packages
Timeline
Published
2 months ago
August 25, 2026 at 03:00 PM UTC
Fixed (v0.45.0)
4 months ago
June 28, 2026 at 04:21 PM UTC
Last Modified
2 months ago
August 25, 2026 at 11:51 PM UTC