search

hashicorp / terraform-provider-vault

Terraform Vault provider
https://www.terraform.io/docs/providers/vault/
Mozilla Public License 2.0
451 stars 535 forks source link

[Bug]: CVE Errors #2211

Open shanewhite97 opened 3 months ago

shanewhite97 commented 3 months ago

Terraform Core Version

1.8.0

Terraform Vault Provider Version

3.25.0

Vault Server Version

1.11.3

Affected Resource(s)

No response

Expected Behavior

We are running Aquasec for container scanning and we would like this to be a CVE terraform provider

Actual Behavior

We see 15 total vulnerabilities listed below: CVE-2023-5077 CVE-2023-24999 CVE-2023-5954 CVE-2024-24557 CVE-2023-0620 CVE-2023-25000 CVE-2023-4680 CVE-2022-41316 CVE-2023-2121 CVE-2023-3462 GHSA-9763-4F94-gfch CVE-2024-2048 CVE-2024-28180 CVE-2024-24786

Relevant Error/Panic Output Snippet

No response

Terraform Configuration Files

N/A

Steps to Reproduce

Install Vault Terraform provider into a container image Have aquasec scan it

Debug Output

No response

Panic Output

No response

Important Factoids

No response

References

No response

Would you like to implement a fix?

None