v1.17.0-beta1
2026-09-10T08:51:35Z•e1ddcb7b11f75bd46c5676840c0ffdc4ea4ea5560ae301a8777f71614df62f6d
CVE-2026-14978.terraformignoreHCP TerraformHashiCorp TerraformTerraform EnterpriseUnicode normalizationbug fixescloud infrastructureephemeral resourcesinfrastructure-as-codeprovider managementrelease notessecurity updatesensitive data
What happened
HashiCorp Terraform release feed covering versions 1.15.9 through 1.17.0-beta1. Releases add policy and planning features, provider and ephemeral-resource enhancements, improved import and state handling, and multiple panic and validation fixes. Terraform 1.15.9 specifically updates go-slug to mitigate CVE-2026-14978, a Unicode-normalization issue that could allow files intended to be excluded by .terraformignore to be uploaded during Terraform Enterprise or HCP Terraform runs.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hashicorp_terraform_releases
- Record identifier
- e1ddcb7b11f75bd46c5676840c0ffdc4ea4ea5560ae301a8777f71614df62f6d
- Enrichment time
- 2026-09-10T08:51:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.