gruntwork-io CVE debriefs

CVE-2026-64672

Terragrunt's `terragrunt catalog` command clones repositories into a temporary directory with a predictable path, allowing a local attacker to plant a symlink and cause Terragrunt to delete and re-clone a directory outside the intended temporary root. This affects users running `terragrunt catalog` on a shared host with untrusted local users or processes.