Go/github.com/gruntwork-io/terragrunt CVE-2026-45099: medium, EPSS 0.54%

Terragrunt: Arbitrary File Deletion via Malicious Module Manifest

Action: Upgrade github.com/gruntwork-io/terragrunt to 1.0.4 or later.

go get github.com/gruntwork-io/terragrunt@v1.0.4

Affected

Fixed versions

Sources

• osv: GHSA-8394-6f8r-whxg
• https://github.com/gruntwork-io/terragrunt/security/advisories/GHSA-8394-6f8r-whxg
• https://github.com/gruntwork-io/terragrunt
• https://github.com/gruntwork-io/terragrunt/releases/tag/v1.0.4

CVE-2026-45099 · published 2026-08-17T16:37:34Z · modified 2026-08-18T14:55:57.579259076Z · JSON