GHSA-32g3-35g9-wc9g
NoneCVSS
—
EPSS
—
Published
Jun 10, 2026
CISA due date
—
The record
@hulumi/drift: Drift classifier fails open on adapter errors and over-promotes Mixed verdicts
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @hulumi/drift | 0 | 1.4.0 |
Related vulnerabilities
- GHSA-2ffm-hxrq-qqmm @hulumi/drift: Orphan reconciler accepted externally supplied execute plans Also affects @hulumi/drift
- CVE-2026-109618 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort… CWE-755
- CVE-2026-109619 PHP has various global state that temporarily points into request memory. CWE-755
- CVE-2026-105757 vLLM is an inference and serving engine for large language models. CWE-755
- CVE-2026-102274 PyJWT is a Python implementation of JSON Web Token standards. CWE-755
- CVE-2026-49305 Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful… CWE-755
- CVE-2026-45819 baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on… CWE-755
- CVE-2026-52856 Wings is the server control plane for Pterodactyl, a free, open-source game server… CWE-755