VDB
KO

GO-2026-6241

Terragrunt: Arbitrary File Deletion via Malicious Module Manifest in github.com/gruntwork-io/terragrunt

Quick fix

GO-2026-6241 — github.com/gruntwork-io/terragrunt: upgrade to the fixed version with the command below.

go get github.com/gruntwork-io/terragrunt@v1.0.4

Details

Terragrunt: Arbitrary File Deletion via Malicious Module Manifest in github.com/gruntwork-io/terragrunt

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/gruntwork-io/terragrunt
Introduced in: 0 Fixed in: 1.0.4
Fix go get github.com/gruntwork-io/terragrunt@v1.0.4

References