@hulumi/drift before 1.3.2 Unsafe Execute Plan Acceptance

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-82858 · Microsoft / collected KEV context

EUVD-2026-68446

GHSA-wpxp-22v5-r9cx

GHSA-2ffm-hxrq-qqmm

cve-program · CVE-2026-82858

• https://github.com/kerberosmansour/hulumi/security/advisories/GHSA-2ffm-hxrq-qqmm
• https://www.vulncheck.com/advisories/hulumi-drift-before-1.3.2-unsafe-execute-plan-acceptance

euvd · EUVD-2026-68446

• https://github.com/kerberosmansour/hulumi/security/advisories/GHSA-2ffm-hxrq-qqmm
• https://www.vulncheck.com/advisories/hulumi-drift-before-1.3.2-unsafe-execute-plan-acceptance

nvd · CVE-2026-82858

• https://github.com/kerberosmansour/hulumi/security/advisories/GHSA-2ffm-hxrq-qqmm
• https://www.vulncheck.com/advisories/hulumi-drift-before-1.3.2-unsafe-execute-plan-acceptance

osv · GHSA-2ffm-hxrq-qqmm

• https://github.com/kerberosmansour/hulumi/security/advisories/GHSA-2ffm-hxrq-qqmm
• https://github.com/kerberosmansour/hulumi

No related operational record is retained in the current change model.