cve.nowby Sazabi

GoPackage

github.com/ctfer-io/terraform-provider-ctfd

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release: v1.1.0 (Dec 23, 2024): affected by CVE-2026-116683
Newest unaffected release: v0.1.4 (Jan 5, 2024)
Advisories: 1 · 1 high

Releases: 18 since v0.1.0 (Dec 17, 2023)
Registry: pkg.go.dev
Releases read: Nov 8, 2026

Version timeline

CVE-2026-116683
Affects v0.1.5 to v1.1.0 (through the newest release)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

CVE-2026-116683High 7.1
CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
Affected: from 0.1.5, through 1.1.0; from 0.1.5.
No fix released. The latest release, v1.1.0, is still affected.