Skip to content

docker.io/hashicorp/terraform:latest (alpine 3.22.1)

Trivy Image Scan

  • Image: docker.io/hashicorp/terraform:latest (alpine 3.22.1)
  • Scan date: 2025-09-13

docker.io/hashicorp/terraform:latest (alpine 3.22.1) (alpine)

No Vulnerabilities found
No Misconfigurations found

bin/terraform (gobinary)

Package Vulnerability ID Severity Installed Version Fixed Version Links
github.com/hashicorp/go-getter CVE-2025-8959 HIGH v1.7.8 1.7.9 https://access.redhat.com/security/cve/CVE-2025-8959 https://discuss.hashicorp.com/t/hcsec-2025-23-hashicorp-go-getter-vulnerable-to-arbitrary-read-through-symlink-attack/76242 https://github.com/hashicorp/go-getter https://github.com/hashicorp/go-getter/commit/87541b2501c00df5eaedea6acc61a2a4a4efa5b7 https://github.com/hashicorp/go-getter/pull/540 https://nvd.nist.gov/vuln/detail/CVE-2025-8959 https://pkg.go.dev/vuln/GO-2025-3892 https://www.cve.org/CVERecord?id=CVE-2025-8959
github.com/ulikunitz/xz CVE-2025-58058 MEDIUM v0.5.10 0.5.15 https://access.redhat.com/security/cve/CVE-2025-58058 https://github.com/ulikunitz/xz https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d2ae2 https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9 https://nvd.nist.gov/vuln/detail/CVE-2025-58058 https://www.cve.org/CVERecord?id=CVE-2025-58058
stdlib CVE-2025-47907 HIGH v1.24.5 1.23.12, 1.24.6 https://access.redhat.com/security/cve/CVE-2025-47907 https://go.dev/cl/693735 https://go.dev/issue/74831 https://groups.google.com/g/golang-announce/c/x5MKroML2yM https://nvd.nist.gov/vuln/detail/CVE-2025-47907 https://pkg.go.dev/vuln/GO-2025-3849 https://www.cve.org/CVERecord?id=CVE-2025-47907
No Misconfigurations found