Information Exposure

github.com/opentofu/opentofu is vulnerable to Information Exposure. The vulnerability is due to the static evaluation of module sources, versions and backend configurations. An attacker can expose sensitive variables and locals...

GO-2024-3182 OpenTofu potential leaking of secret variable values when using static evaluation in v1.8 in github.com/opentofu/opentofu

OpenTofu potential leaking of secret variable values when using static evaluation in v1.8 in github.com/opentofu/opentofu...

OpenTofu potential leaking of secret variable values when using static evaluation in v1.8

Impact Users who have opted into static evaluation of module sources, versions, and backend configurations may be at risk of exposing sensitive variables and locals. This is a workflow that should not be possible and explicitly show errors. Workarounds Check that you are not using sensitive...

GHSA-WPR2-J6GR-PJW9 OpenTofu potential leaking of secret variable values when using static evaluation in v1.8

Impact Users who have opted into static evaluation of module sources, versions, and backend configurations may be at risk of exposing sensitive variables and locals. This is a workflow that should not be possible and explicitly show errors. Workarounds Check that you are not using sensitive...

[SECURITY] Fedora 40 Update: opentofu-1.8.0-1.fc40

OpenTofu lets you declaratively manage your cloud infrastructure...

[SECURITY] Fedora 39 Update: opentofu-1.8.0-1.fc39

OpenTofu lets you declaratively manage your cloud infrastructure...

Fedora 39 : opentofu (2024-35147eb6ad)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-35147eb6ad advisory. Update to 1.8.0 ---- Fix for CVE-2024-6257 CVE-2024-6104 CVE-2024-24789 Tenable has extracted the preceding description block directly from the Fedo...

Fedora 40 : opentofu (2024-c83208238d)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c83208238d advisory. Update to 1.8.0 ---- Fix for CVE-2024-6257 CVE-2024-6104 CVE-2024-24789 Tenable has extracted the preceding description block directly from the Fedo...

Fedora: Security Advisory (FEDORA-2024-35147eb6ad)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-c83208238d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: tfsec, conftest, kubescape, grype, snyk-cli, wolfictl, zarf, trivy, k9s, zot, tflint, kots, terragrunt, terraform...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: terragrunt, wolfictl, kots, terraform, tflint, tfsec, kubescape, conftest, trivy, conftest-fips, snyk-cli, trivy-fips, grype, k9s, zarf, zot...

CVE-2024-6257 vulnerabilities

Vulnerabilities for packages: terragrunt, wolfictl, kots, terraform, tflint, tfsec, kubescape, conftest, trivy, conftest-fips, snyk-cli, trivy-fips, grype, k9s, zarf, zot...

GHSA-Q64H-39HV-4CF7 vulnerabilities

Vulnerabilities for packages: terraform, tflint, tfsec, kubescape, conftest, conftest-fips, k9s, zarf, zot...

GHSA-Q64H-39HV-4CF7 vulnerabilities

Vulnerabilities for packages: tfsec, conftest, kubescape, zarf, k9s, zot, tflint, terraform...

CVE-2024-3817 vulnerabilities

Vulnerabilities for packages: terraform, tflint, tfsec, kubescape, conftest, conftest-fips, k9s, zarf, zot...

CVE-2024-3817 vulnerabilities

Vulnerabilities for packages: tfsec, conftest, kubescape, zarf, k9s, zot, tflint, terraform...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kubeflow, fuse-overlayfs-snapshotter, secrets-store-csi-driver, skaffold, memcached-exporter, terraform-provider-sendgrid, mc, flux-notification-controller, gke-gcloud-auth-plugin, ip-masq-agent, nginx-stable, sigstore-scaffolding, kubewatch, hey, kots, nats,...