v1.16.0-rc2

2026-08-20T08:51:35Z•9b8216d372db2960b6a81c8528654a63f92ce753fdeec9102deefc661c3f6045

CVE-2026-14978.terraformignoreHCP TerraformHashiCorp TerraformTerraform CLITerraform EnterpriseUnicode normalizationcloud infrastructurego-sluginfrastructure as codepreview releaserelease notessecurity fix

Open source link →

What happened

HashiCorp Terraform release feed covering preview releases for Terraform 1.16 and 1.17, plus Terraform 1.15.9. Version 1.15.9 fixes child-module validation and updates go-slug to v0.18.3 to mitigate CVE-2026-14978, a Unicode normalization issue that could cause files intended to be excluded by .terraformignore to be uploaded to Terraform Enterprise or HCP Terraform during runs. Other entries describe new Terraform features, enhancements, and bug fixes without additional security vulnerabilities.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: hashicorp_terraform_releases
Record identifier: 9b8216d372db2960b6a81c8528654a63f92ce753fdeec9102deefc661c3f6045
Enrichment time: 2026-08-20T08:51:35Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records