v1.17.0-alpha20260827
2026-08-28T08:51:35Z•adee7f4b194881db2a349a026d2038e96b2ac335563c684d2a09727c09974b73
CVE-2026-14978HCP TerraformHashiCorp TerraformTerraform CLITerraform EnterpriseUnicode normalizationcloud infrastructuredependency updateinformation disclosurereleasesecurity updateterraformignore
What happened
HashiCorp Terraform release feed covering Terraform 1.15.9, 1.16.0, prereleases, and 1.17.0 alpha builds. The security-relevant update is Terraform 1.15.9, which upgrades go-slug to v0.18.3 to mitigate CVE-2026-14978, a Unicode normalization issue that could cause files to bypass .terraformignore and be uploaded to Terraform Enterprise or HCP Terraform during a run. Other entries describe feature enhancements and stability fixes.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hashicorp_terraform_releases
- Record identifier
- adee7f4b194881db2a349a026d2038e96b2ac335563c684d2a09727c09974b73
- Enrichment time
- 2026-08-28T08:51:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.