v1.16.3
2026-09-17T08:51:35Z•049b2516f6a9bdf4060887e9fe01d3799c4eab4427f64cfb4e7e0350bf6bbe7b
CVE-2026-14978.terraformignoreHCP TerraformHashiCorp TerraformTerraform EnterpriseUnicode normalizationbug fixescloud automationinfrastructure-as-codeprovider managementrelease notesstate management
What happened
HashiCorp Terraform release feed covering versions 1.15.9 through 1.17.0 beta and 1.16.3. The updates primarily contain feature additions, provider and state-management enhancements, validation and import fixes, and panic fixes. Terraform 1.15.9 also updates go-slug to mitigate CVE-2026-14978, a Unicode normalization issue that could cause files to bypass .terraformignore exclusions during upload to Terraform Enterprise or HCP Terraform.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hashicorp_terraform_releases
- Record identifier
- 049b2516f6a9bdf4060887e9fe01d3799c4eab4427f64cfb4e7e0350bf6bbe7b
- Enrichment time
- 2026-09-17T08:51:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.