Terraform is a tool for safely and efficiently building, combining, and launching infrastructure. From physical servers to containers to SaaS products, Terraform can create and compose all the components necessary to run any service or application.

Terraform Community

Packer is a software for creating identical machine images or containers for multiple platforms from a single source configuration.

Packer

Grafana is an open-source visualization and analytics software. It allows you to query, visualize, alert on, and explore your metrics and time-series database (TSDB) data.

Grafana

Datadog is a monitoring service for cloud-scale applications, providing monitoring of servers, databases, tools, and services through a SaaS-based data analytics platform.

Datadog Agent

Prometheus is an open-source monitoring system with a dimensional data model, flexible query language, efficient time series database, and modern alerting approach.

Prometheus

Compose is a tool for defining and running multi-container Docker applications. With Compose, you use a YAML file to configure your application's services. Then, with a single command, you create and start all the services from your configuration. Compose works in all environments: production, staging, development, testing, as well as CI workflows.

Docker Compose

A simple and comprehensive vulnerability scanner for containers, suitable for CI.

Trivy

Amazon CloudWatch monitors your Amazon Web Services (AWS) resources and the applications you run on AWS in real time. You can use CloudWatch to collect and track metrics, which are the variables you can measure for your resources and applications.

Amazon CloudWatch Agent

InfluxDB is a time series database. It is written in Go and optimized for fast, high-availability storage and retrieval of time series data in fields such as operations monitoring, application metrics, Internet of Things sensor data, and real-time analytics.

InfluxDB

CRI-O is an implementation of the Kubernetes CRI (Container Runtime Interface) to enable the use of OCI (Open Container Initiative) compatible runtimes. It is a lightweight alternative to using Docker as the runtime for Kubernetes.

CRI-O

Atlantis is an application for automating Terraform via pull requests. It is deployed as a standalone application into your infrastructure.

Atlantis

CBL Marine is an open source distro, created by Microsoft. Mainly used in Azure cloud and Microsoft Internally.

CBL Mariner

Wolfi is a community Linux OS designed for the container and cloud-native era; it is a Linux distribution based on Alpine.

Wolfi

Chainguard is a Linux distribution based on Alpine. It's the commercial version of the Wolfi distro.

Chainguard

Terraform is a tool for safely and efficiently building, combining, and launching infrastructure. From physical servers to containers to SaaS products, Terraform is able to create and compose all the components necessary to run any service or application.

Terraform

Thanos is an open-source project that extends the functionality of the Prometheus monitoring system by adding features like high availability and long-term historical data storage. Built to meet the requirements of scalability and reliability, Thanos allows seamless access to Prometheus data across different databases. It also uses a highly efficient compression algorithm, resulting in cost-effective storage.

Thanos

MinimOS is a minimalist operating system designed for simplicity and efficiency. It aims to provide only essential functionalities, making it lightweight and suitable for resource-constrained environments. MinimOS is often used in embedded systems or as a base for custom operating system development.

MinimOS

Debian GNU/Linux is a Linux distribution composed of free and open-source software.

Linux Debian

Fedora is a popular open-source, Linux-based operating system.

Linux Fedora

Red Hat Enterprise Linux is a Linux distribution developed by Red Hat for the commercial market.

Linux Red Hat

Linux openSUSE

The Amazon Linux is a supported and maintained Linux image provided by Amazon Web Services for use on Amazon Elastic Compute Cloud (Amazon EC2).

Amazon Linux

Echo is a secure, minimal Linux OS built vulnerability-free. It is fully compatible across environments and continuously patched - making it a clean, dependable base layer for modern applications. Echo is used by organizations focused on security and reliability, including those with compliance or FIPS requirements.

Echo

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in security-critical contexts.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2025-68121	CRITICAL	10	cAdvisor	golang-race	No	Yes	Feb 05, 2026
CVE-2026-33186	CRITICAL	9.1	cAdvisor	jaeger-1	No	Yes	Mar 20, 2026
CVE-2025-61732	HIGH	8.6	cAdvisor	kube-vip-cloud-provider-0.0.10	No	Yes	Feb 05, 2026
CVE-2025-68119	HIGH	7	cAdvisor	jaeger-2	No	Yes	Jan 28, 2026
CVE-2025-47911	MEDIUM	5.3	Terraform Community	multus	No	Yes	Feb 05, 2026

CVE-2025-11065:
Terraform Community vulnerability analysis and mitigation

5.3

Related Terraform Community vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2025-11065: Terraform Community vulnerability analysis and mitigation