AZL-96603
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-96603.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-96603
- Upstream
- Published
- 2026-08-17T21:16:43Z
- Modified
- 2026-09-19T05:33:49Z
- Summary
- CVE-2026-19589 affecting package packer for versions less than 1.9.5-20
- Details
-
Packer up to 1.15.4 is vulnerable to an issue in the third-party plugin installer that may allow unintended file system modification and could lead to code execution. A user who installs a plugin from a malicious or compromised source may be affected. This vulnerability (CVE-2026-19589) is fixed in Packer 1.16.0.
- References