CVE-2024-58375

OpenTofu 1.8.0–1.8.2 do not properly restrict sensitive variables/locals when static evaluation is enabled, allowing potential leakage of values marked as sensitive through configuration elements. The issue is resolved in OpenTofu 1.8.3, which adds explicit errors to prevent use of sensitive valu...

GO-2026-5558 vulnerabilities

Vulnerabilities for packages: opentofu-fips, opentofu...

GO-2025-4101 vulnerabilities

Vulnerabilities for packages: opentofu...

GO-2025-3413 vulnerabilities

Vulnerabilities for packages: vault, terraform, opentofu-fips, opentofu...

GO-2026-4352 vulnerabilities

Vulnerabilities for packages: opentofu...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: headlamp-fips, rancher-helm, kube-mgmt, kyverno-notation-aws, trivy-fips, helm-exporter, kyverno-fips, chartmuseum-fips, kyverno-notation-aws-fips, eksctl, k8ssandra-client, crossplane-fips, kube-arangodb, k9s, kgateway, rancher, crossplane,...

GO-2026-4352 vulnerabilities

Vulnerabilities for packages: opentofu...

GO-2025-3413 vulnerabilities

Vulnerabilities for packages: terraform, opentofu...

GO-2025-4101 vulnerabilities

Vulnerabilities for packages: opentofu...

GO-2026-5558 vulnerabilities

Vulnerabilities for packages: opentofu...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: envoy-gateway, steampipe, podman, undock, tflint, trufflehog, rancher-fleet, terraform, guac, kubescape-operator, trivy, trivy-operator, zarf, zot, nuclei, vcluster, xeol, k9s, opentofu, gptscript, grafana-alloy, gitleaks, terragrunt, nsc, filebrowser, gitness...

GO-2026-5058 vulnerabilities

Vulnerabilities for packages: steampipe, tflint, grype, terraform, snyk-cli, trivy, trivy-operator, wolfictl, zarf, syft, task, kubescape, zot, xeol, k9s, opentofu, conftest, terragrunt, tfsec, kots...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: tkn, kubecolor, spire-server, flux-source-controller, traefik, cloud-sql-proxy, amazon-cloudwatch-agent-operator, dagger, mockery, trivy, istio, tekton-chains, nri-discovery-kubernetes, terraform-provider-acme, opentofu, conftest, nri-postgresql, opa-envoy, tfsec,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: tkn, kpt, kubernetes-dashboard-api, containerd, skopeo, karma, crossplane-provider-aws-iam, flux-helm-controller, prometheus-adapter, step, x509-certificate-exporter, crossplane-provider-aws-sns, crossplane-provider-aws-kms, kube-arangodb, rancher-helm,...

GO-2026-5026 vulnerabilities

Vulnerabilities for packages: tkn, kratos, karma, crossplane-provider-aws-kms, sbomqs, kube-arangodb, rabbitmq-messaging-topology-operator, spire-server, pdfcpu, terraform-provider-azapi, flux-source-controller, terraform, dapr, kubernetes-csi-node-driver-registrar, grpcurl,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: ctop, containerd, emissary, external-secrets-operator, harbor, neuvector-scanner, prometheus-adapter, skopeo, cluster-api-helm-controller, libnvidia-container, crossplane-provider-aws-sns, gostatsd, crossplane-provider-aws-kms, node-problem-detector, spire-server,...

GO-2026-4985 vulnerabilities

Vulnerabilities for packages: tkn, containerd, ferretdb, external-secrets-operator, harbor, flux, traefik, hubble, dapr, kubernetes-csi-node-driver-registrar, distribution, gitaly, weaviate, dagger, knative-eventing, hydra, tekton-pipelines, kiali, gatekeeper, flux-notification-controller,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: tkn, mods, containerd, external-secrets-operator, crossplane-provider-aws-iam, step, crossplane-provider-aws-sns, podman, crossplane-provider-aws-kms, eksctl, spire-server, flux, skaffold, terraform-provider-azapi, flux-source-controller, traefik, kubernetes, chisel,...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: containerd, external-secrets-operator, step, podman, spire-server, flux, skaffold, flux-source-controller, kubernetes, dagger, trivy, istio, mattermost, opentofu, rancher, step-kms-plugin, openbao, osv-scanner, kyverno, argo-cd, gitlab-kas, gomplate, scorecard, grype...

GO-2026-5018 vulnerabilities

Vulnerabilities for packages: tkn, mods, containerd, external-secrets-operator, step, podman, eksctl, spire-server, flux, skaffold, flux-source-controller, kubernetes, chisel, dagger, trivy, istio, crossplane-provider-azure-storage, tekton-chains, ksops, flux-notification-controller, mattermost,...