UNKNOWN npm
@hulumi/baseline: CloudTrail selector tampering events were not fully detected
GHSA-gfp8-mp24-5vxg · CVE-2026-82863
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Impact: @hulumi/baseline versions before 1.3.2 could miss some CloudTrail event-selector tampering evidence, reducing coverage for changes to audit logging configuration.
Patched in 1.3.2: detection coverage and regression tests were expanded.
Remediation: upgrade @hulumi/baseline to 1.3.2 or later and rerun affected previews/checks.
Ready to move
Start Securing
Free, no credit card | First findings in minutes