Skip to content

CloudTrail selector tampering events were not fully detected

Moderate
kerberosmansour published GHSA-gfp8-mp24-5vxg May 15, 2026

Package

npm @hulumi/baseline (npm)

Affected versions

< 1.3.2

Patched versions

1.3.2

Description

Impact: @hulumi/baseline versions before 1.3.2 could miss some CloudTrail event-selector tampering evidence, reducing coverage for changes to audit logging configuration.

Patched in 1.3.2: detection coverage and regression tests were expanded.

Remediation: upgrade @hulumi/baseline to 1.3.2 or later and rerun affected previews/checks.

Severity

Moderate

CVE ID

No known CVE

Weaknesses

Insufficient Logging

When a security-critical event occurs, the product either does not record the event or omits important details about the event when logging it. Learn more on MITRE.