https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:46:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-238047 EUVD-2026-238047 https://cve.radiocsirt.org/vuln/euvd-2026-238047 https://cve.radiocsirt.org/vuln/fkie_cve-2025-46735 <p>Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue has been found in Terraform WinDNS Provider before version `1.0.5`. The `windns_record` resource did not sanitize the input variables. This could lead to authenticated command injection in the underlyding powershell command prompt. Version 1.0.5 contains a fix for the issue.</p> <p>Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue has been found in Terraform WinDNS Provider before version `1.0.5`. The `windns_record` resource did not sanitize the input variables. This could lead to authenticated command injection in the underlyding powershell command prompt. Version 1.0.5 contains a fix for the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-46735 https://cve.radiocsirt.org/vuln/ghsa-4vgf-2cm4-mp7c <p><strong>Affected:</strong> Go: github.com/nrkno/terraform-provider-windns</p> <p>## Impact: A security issue has been found in `terraform-provider-windns` before version `1.0.5`. The `windns_record` resource did not santize the input variables. This can lead to authenticated command injection in the underlyding powershell command prompt.</p> <p>## Patches:</p> <p>[`83ef736 (fix: better input validation)`](https://github.com/nrkno/terraform-provider-windns/commit/c76f69610c1b502f90aaed8c4f102194530b5bce) ## Fixed versions:</p> <p>- `v1.0.5`</p> <p><strong>Affected:</strong> Go: github.com/nrkno/terraform-provider-windns</p> <p>## Impact: A security issue has been found in `terraform-provider-windns` before version `1.0.5`. The `windns_record` resource did not santize the input variables. This can lead to authenticated command injection in the underlyding powershell command prompt.</p> <p>## Patches:</p> <p>[`83ef736 (fix: better input validation)`](https://github.com/nrkno/terraform-provider-windns/commit/c76f69610c1b502f90aaed8c4f102194530b5bce) ## Fixed versions:</p> <p>- `v1.0.5`</p> https://cve.radiocsirt.org/vuln/ghsa-4vgf-2cm4-mp7c https://cve.radiocsirt.org/vuln/opensuse-su-2025:15135-1 <p>govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15135-1