Terraform is a tool for safely and efficiently building, combining, and launching infrastructure. From physical servers to containers to SaaS products, Terraform can create and compose all the components necessary to run any service or application.

Terraform Community

Wolfi is a community Linux OS designed for the container and cloud-native era; it is a Linux distribution based on Alpine.

Wolfi

Chainguard is a Linux distribution based on Alpine. It's the commercial version of the Wolfi distro.

Chainguard

Terraform is a tool for safely and efficiently building, combining, and launching infrastructure. From physical servers to containers to SaaS products, Terraform is able to create and compose all the components necessary to run any service or application.

Terraform

HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2026-84304	HIGH	8.7	cAdvisor	envoy-gateway-fips-1.8	No	Yes	Sep 01, 2026
CVE-2026-78662	HIGH	7.5	Docker	kubescape-server-fips	No	Yes	Sep 02, 2026
CVE-2026-56855	HIGH	7.5	Docker	fulcio-fips	No	Yes	Sep 02, 2026
CVE-2026-56862	HIGH	7.5	Go	kepler-fips	No	Yes	Aug 13, 2026
CVE-2026-14978	MEDIUM	5.5	Terraform Community	terraform	No	Yes	Aug 19, 2026

CVE-2026-14978:
Terraform Community vulnerability analysis and mitigation

5.5

Related Terraform Community vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2026-14978: Terraform Community vulnerability analysis and mitigation