https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:04:58.910298+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-238047 EUVD-2026-238047 2026-10-04T04:04:59.028470+00:00 EUVD-2026-238047 https://cve.radiocsirt.org/vuln/fkie_cve-2025-46735 fkie_cve-2025-46735 2026-10-04T04:04:59.028508+00:00

Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue has been found in Terraform WinDNS Provider before version `1.0.5`. The `windns_record` resource did not sanitize the input variables. This could lead to authenticated command injection in the underlyding powershell command prompt. Version 1.0.5 contains a fix for the issue.

 https://cve.radiocsirt.org/vuln/ghsa-4vgf-2cm4-mp7c GHSA-4vgf-2cm4-mp7c — Terraform WinDNS Provider improperly sanitizes input variables in `windns_record` 2026-10-04T04:04:59.028543+00:00

Affected: Go: github.com/nrkno/terraform-provider-windns

## Impact: A security issue has been found in `terraform-provider-windns` before version `1.0.5`. The `windns_record` resource did not santize the input variables. This can lead to authenticated command injection in the underlyding powershell command prompt.

## Patches:

[`83ef736 (fix: better input validation)`](https://github.com/nrkno/terraform-provider-windns/commit/c76f69610c1b502f90aaed8c4f102194530b5bce) ## Fixed versions:

- `v1.0.5`

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15135-1 openSUSE-SU-2025:15135-1 — govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media 2026-10-04T04:04:59.028574+00:00

govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media