Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
CLEANSTART-2026-MI15449
  • CleanStart/opentofu-fips
Security fix for ghsa-r92c-9c7f-3pj8 applied in: opentofu-fips 1.11.4-r0 yesterday
  • Fix available
CVE-2026-74797
  • github.com/opentofu/opentofu
OpenTofu before 1.11.4 Denial of Service via malicious zip 16 Aug
  • Fix available
  • Severity - 2.3 (Low)
GO-2026-4352
  • Go/github.com/opentofu/opentofu
OpenTofu has High CPU usage in "tofu init" with maliciously-crafted module packages in .zip format in github.com/opentofu/opentofu 02 Feb
  • Fix available
CGA-38r8-9cf5-xp9p
  • Chainguard/opentofu-1.9
  • Wolfi/opentofu-1.9
See record for full details 22 Jan
  • No fix available
  • Severity - 3.1 (Low)
CGA-2hjj-wjcr-hfrw
  • Chainguard/opentofu-1.9
  • Wolfi/opentofu-1.9
See record for full details 22 Jan
  • No fix available
  • Severity - 3.1 (Low)
CGA-6vrc-rcw9-3jvg
  • Chainguard/opentofu-fips-1.8
See record for full details 22 Jan
  • No fix available
  • Severity - 3.1 (Low)
CGA-2232-3vvw-jxc4
  • Chainguard/opentofu-fips-1.8
See record for full details 22 Jan
  • No fix available
  • Severity - 3.1 (Low)
CGA-wqj7-ccvv-p29v
  • Chainguard/opentofu-1.8
See record for full details 22 Jan
  • No fix available
  • Severity - 3.1 (Low)
CGA-7qpw-vg3v-mx93
  • Chainguard/opentofu-1.8
See record for full details 22 Jan
  • No fix available
  • Severity - 3.1 (Low)
CGA-wcfq-j92v-pwg5
  • Chainguard/opentofu-fips-1.9
See record for full details 22 Jan
  • No fix available
  • Severity - 3.1 (Low)
CGA-29fj-w92p-qr7m
  • Chainguard/opentofu-fips-1.9
See record for full details 22 Jan
  • No fix available
  • Severity - 3.1 (Low)
CGA-xx7r-qrjv-h4gh
  • Chainguard/opentofu-1.11
  • Wolfi/opentofu-1.11
See record for full details 22 Jan
  • Fix available
  • Severity - 3.1 (Low)
CGA-wv3r-g6mj-8m89
  • Chainguard/opentofu-1.11
  • Wolfi/opentofu-1.11
See record for full details 22 Jan
  • Fix available
  • Severity - 3.1 (Low)
CGA-qr8p-mgxq-48v9
  • Chainguard/opentofu-fips-1.10
See record for full details 22 Jan
  • No fix available
  • Severity - 3.1 (Low)
CGA-32vf-gq3c-9h78
  • Chainguard/opentofu-fips-1.10
See record for full details 22 Jan
  • No fix available
  • Severity - 3.1 (Low)
CGA-945p-xf2g-5553
  • Chainguard/opentofu-1.10
  • Wolfi/opentofu-1.10
See record for full details 22 Jan
  • No fix available
  • Severity - 3.1 (Low)