{"vulnerability": "CVE-2026-82856", "sightings": [{"uuid": "e0a8f3fb-2ed7-43d5-9b1f-1e5935dd3216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82856", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muemx3wk4b2p", "content": "CVE-2026-82856 - policies\nVersions of the Hulumi policies package older than 1.3.2 do not correctly verify certain AWS permission rules used in GitHub OpenID Connect (OIDC) trust settings. This allows a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#policies #hulumi #CVE #infosec", "creation_timestamp": "2026-08-31T09:50:07.302179Z"}, {"uuid": "e0bb7188-68f0-4451-ba4b-d5c7911cbdb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82856", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenwhmlrx2f", "content": "\ud83d\udea8 CVE-2026-82856 \u2014 CVSS 9.3 CRITICAL\n\n@hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82856\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:39.801021Z"}]}