Bridgecrew Checkov
Approved changes feed: RSS · Atom
cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Bridgecrew Checkov (debe0ec7-16fa-5089-b67c-7bf44329fbcd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/bridgecrew/checkov |
purl2cpe | 2026-06-01 10:16:49.932886 |
pkg:github/bridgecrewio/checkov |
purl2cpe | 2026-06-01 10:16:49.932889 |
pkg:github/nimrodkor/checkov |
purl2cpe | 2026-06-01 10:16:49.932892 |
pkg:pypi/checkov |
purl2cpe | 2026-06-01 10:16:49.932895 |
pkg:pypi/checkov2 |
purl2cpe | 2026-06-01 10:16:49.932898 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-3040 |
vulnerable | 2026-06-08 05:33:50.727295 |
Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution
MEDIUM (6.7)
An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted.
Published: 2021-06-10T12:33:06.414Z
Updated: 2024-09-16T18:23:39.787Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3035 |
vulnerable | 2026-06-08 05:33:50.721308 |
Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution
MEDIUM (6.7)
An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted.
Published: 2021-04-20T03:15:16.551Z
Updated: 2024-09-17T03:17:34.411Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.