Skip to content
OpenAdvisories

Vendor

opentofu

3 known vulnerabilities.

Products

opentofu 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-74797

    OpenTofu before 1.11.4 Denial of Service via malicious zip

    OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing maliciously-crafted .zip archives for provider or module packages. Attackers can cause excessive CPU usage by controlling .zip archive content s…

    opentofu opentofu github.com/opentofu/opentofu Go