GHSA-cj8g-prcm-mfg5
NoneCVSS
—
EPSS
—
Published
Jun 10, 2026
CISA due date
—
The record
@hulumi/baseline: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @hulumi/baseline | 0 | 1.4.0 |
Related vulnerabilities
- GHSA-2mxr-p26x-mj73 @hulumi/baseline: AccountFoundation audit-delivery S3 bucket could be silently weakened Also affects @hulumi/baseline
- GHSA-gfp8-mp24-5vxg @hulumi/baseline: CloudTrail selector tampering events were not fully detected Also affects @hulumi/baseline
- CVE-2026-113730 OGNL is an Object Graph Navigation Library for Java. CWE-693
- CVE-2026-112077 A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. CWE-693
- CVE-2026-88838 A flaw was found in BusyBox's mount utility. CWE-693
- CVE-2026-101899 Axios is a promise-based HTTP client for the browser and Node.js. CWE-693
- CVE-2026-107226 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP… CWE-693
- CVE-2026-107697 FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that… CWE-693