VendorsHashiCorpterraform_providerany version
Vulnerabilities

HashiCorp Terraform Provider any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2021-30476
HashiCorp Terraform’s Vault Provider (terraform-provider-vault) did not correctly configure GCE-type bound labels for Vault’s GCP auth method. Fixed in 2.19.1.
Published 2021-04-22 · Modified
9.8EPSS 0.016
CVE-2025-13357
Vault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method
Published 2025-11-21 · Analyzed
9.8EPSS 0.005