Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:hulumi:policies:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Security Policy Bypass in @hulumi/policies via Parent Spoofing

The @hulumi/policies package before version 1.3.2 is vulnerable to a parent spoofing attack that allows unauthorized actors to bypass security policy enforcement during bucket configuration validation.

policies supply-chain vulnerability cloud-security
1t 1c