Skip to content
Threat Feed

Product

@Hulumi/Policies (< 1.3.2)

1 brief RSS
medium advisory

@hulumi/policies Evidence Bypass Vulnerability

@hulumi/policies versions before 1.3.2 allowed unrelated compliant-looking evidence to suppress violations for different zones, hostnames, origins, or repositories in the same stack, bypassing Cloudflare and deployment-governance guardrails.

@hulumi/policies dependency-confusion security-bypass cloud
2r