v1.17.1
2026-10-29T08:51:35Z•3d936f52058116f7684ea6c2d92b6b2f6b19632e9950df1b172c84b09039698d
CVE-2026-111943CVE-2026-78669HTTP/2HashiCorp Terraformcertificate trustcloud securityeMudhrainfrastructure-as-codemodule registrypolicy as codeprovider registryresource exhaustionsecurity updatesoftware releasev1.16.7v1.17.1
What happened
HashiCorp Terraform release feed covering versions 1.16.3 through 1.17.1. The notable security-related updates are CVE-2026-78669, addressing HTTP/2 resource exhaustion when using a compromised untrusted provider or module registry, and CVE-2026-111943, handled through an updated Go toolchain that distrusts certificates issued by compromised eMudhra intermediate CAs. Terraform 1.17 also introduces generally available policy features and minimal-refresh planning, while subsequent releases include stability and policy-evaluation fixes.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hashicorp_terraform_releases
- Record identifier
- 3d936f52058116f7684ea6c2d92b6b2f6b19632e9950df1b172c84b09039698d
- Enrichment time
- 2026-10-29T08:51:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.