C3X: Offline cloud cost estimation from Terraform

v0.1.5 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 11d Infrastructure as Code

✓ No known CVEs patched

This release patches 1 known CVE

Topics

aws azure cloud-costs cost-estimation devops finops

+2 more

gcp terraform

Affected surfaces

breaking_upgrade

ReleasePort's take

Moderate signal

editorial:auto 11d

c3x v0.1.5 disables remote modules by default when processing untrusted Terraform configurations, enhancing security.

Why it matters: Hardens c3x for untrusted Terraform inputs by disabling remote modules (--no-remote-modules) with high severity (90).

AI summary

Security hardening for untrusted Terraform (--no-remote-modules).

Type	Severity	Summary	CVE
Security	Critical	Hardens c3x for untrusted Terraform by disabling remote modules (--no-remote-modules). Hardens c3x for untrusted Terraform by disabling remote modules (--no-remote-modules). Source: llm_adapter@2026-07-15 Confidence: high	—

Full changelog

15b50025599ebc72332ad23444fc21e6d9769ac1 docs(action): document per-PR delta + budget-delta gate in usage header
27af41f705f0293662853966f6ae16ac12441b5b security: harden c3x for untrusted Terraform (--no-remote-modules)

brew install c3xdev/tap/c3x
go install github.com/c3xdev/c3x/cmd/[email protected]
docker pull ghcr.io/c3xdev/c3x:0.1.5

Hardened C3X against untrusted Terraform configurations using --no-remote-modules flag.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track C3X: Offline cloud cost estimation from Terraform

Get notified when new releases ship.

About C3X: Offline cloud cost estimation from Terraform