Skip to content
OpenAdvisories

Package · Go

github.com/opentofu/opentofu

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-58375

    OpenTofu before 1.8.3 Secret Variable Leaking via Static Evaluation

    OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into static evaluation of module sources, versions, and backend configurations. As a result, values marked as sensitive may be exposed through …

    opentofu opentofu github.com/opentofu/opentofu Go
  • High 7.5
    GHSA-q7j3-v8qv-22vq

    OpenTofu: Possible arbitrary file read during certain git operations via a maliciously crafted URL

    ### Impact Possible data exposure. #### Summary While downloading packages from a maliciously crafted URL, some git operations against that URL could allow arbitrary file read. This might allow disclosure of confidential information. #### Details OpenTofu rel…

    github.com/opentofu/opentofu Go