drift vulnerabilities

1 known vulnerability in drift from Hulumi. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  drift: Insufficient Verification of Data Authenticity

  CVE-2026-82858Aug 31, 2026Hulumi

  @hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, allowing untrusted reconciliation input to be treated as trusted. Attackers can supply malicious execute plans that bypass security checks to