Upbound Official
provider-terraform
By upboundLast changed 25 days ago
Availability
Community
Standard
Enterprise
Business Critical
Languages
Support
Upbound Supported
12 months window ends 2027/01/27
Security & Maintenance
CVE Remediation
Backporting
Upbound signed
Source Code
Notice something off about this package? Help us keep the marketplace safe and trustworthy by reporting inappropriate content or behavior.
Report this packageOverview
Crossplane provider to manage Terraform workspaces.
Summary
This release includes security fixes and dependency updates.
Highlights
- Security vulnerability remediation for Go runtime (updated to 1.25.9)
- Fixes CVE-2026-27140, CVE-2026-32283, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-32282, CVE-2026-32288
- Updated github.com/hashicorp/go-getter to v1.8.6 (fixes GHSA-92mm-2pjq-r785)
- Updated github.com/go-jose/go-jose/v4 to v4.1.4 (fixes GHSA-78h2-9frx-2jm8)
- Updated go.opentelemetry.io/otel/sdk to v1.43.0 (fixes GHSA-hfvc-g4fc-pqhx)
- Updated AWS SDK dependencies to address GHSA-xmrv-pmrh-hhx2