What is GHSA-gfp8-mp24-5vxg?

GHSA-gfp8-mp24-5vxg is a security advisory published by GitHub Security Advisories with Medium severity. @hulumi/baseline: CloudTrail selector tampering events were not fully detected

Why does GHSA-gfp8-mp24-5vxg have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-gfp8-mp24-5vxg?

GHSA-gfp8-mp24-5vxg affects 1 product, including: npm/@hulumi/baseline:\u003c 1.3.2.

GHSA-gfp8-mp24-5vxgMediumDisclosed before NVD

@hulumi/baseline: CloudTrail selector tampering events were not fully detected

Vendor

GitHub Security Advisories

Published

May 21, 2026

Last Modified

May 21, 2026

📋 Description

Impact: @hulumi/baseline versions before 1.3.2 could miss some CloudTrail event-selector tampering evidence, reducing coverage for changes to audit logging configuration. Patched in 1.3.2: detection coverage and regression tests were expanded. Remediation: upgrade @hulumi/baseline to 1.3.2 or later and rerun affected previews/checks.

🎯 Affected products1

npm/@hulumi/baseline:< 1.3.2

🔗 References (2)

https://github.com/kerberosmansour/hulumi/security/advisories/GHSA-gfp8-mp24-5vxg
https://github.com/advisories/GHSA-gfp8-mp24-5vxg