Skip to main content
VulnerabilityPublished 07/21/2026Updated 09/09/2026

Atlantis: Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-wjrx-6529-hcj3 applied in versions: 0.37.1-r1

Affects atlantisSource GCVE Database

0

Fixed in 0.37.1-r1 : update atlantis when convenient.

Data as of 09/09/2026, 13:45:40 UTC

Severity
Medium

Rated by Threat Radar

Patch
Available – fixed in 0.37.1-r1

What to do

Affected software

ProductAffectedFixed in
CleanStartatlantisAffected
  • <0.37.1-r1
Fixed in
  • 0.37.1-r1

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Upgrade to Atlantis version 0.37.1-r1 or later, which contains fixes for the identified vulnerabilities. Since patchAvailable is true and the fixed version is explicitly stated, applying this update is the recommended remediation.

Description

Multiple security vulnerabilities were identified in the Atlantis package. These vulnerabilities have been addressed and fixed in version 0.37.1-r1. No details about the specific nature or impact of these vulnerabilities are provided. There are no known exploits in the wild related to these issues. Users should upgrade to version 0.37.1-r1 to mitigate the risks.

Impact

The vulnerabilities could potentially allow attackers to compromise the affected Atlantis package versions prior to 0.37.1-r1. However, the absence of CVSS scores and known exploits limits the ability to assess the exact impact. The issues are considered significant enough to warrant a security update.

Summary

The Atlantis package was affected by multiple security vulnerabilities, which have been resolved in version 0.37.1-r1. The vulnerabilities correspond to advisories ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, and ghsa-wjrx-6529-hcj3. No further technical details or CVSS scores are available. The package is not a cloud service, and no known exploits have been reported.

References

Community reviews

Loading reviews…