Medium severity6.7NVD Advisory· Published Apr 20, 2021· Updated Jun 17, 2026
CVE-2021-3035
CVE-2021-3035
Description
An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:*:*:*:*:*:*:*:*range: >=2.0.0,<2.0.26
- (no CPE)range: 2.0
- Range: >=2.0.0 <2.0.26
Patches
Vulnerability mechanics
References
1- security.paloaltonetworks.com/CVE-2021-3035nvdVendor Advisory
News mentions
0No linked articles in our index yet.