220 matches found
CLEANSTART-2026-SO98691 Security fix for ghsa-r92c-9c7f-3pj8 applied in: opentofu 1.11.4-r0
Security vulnerability affects the opentofu package. This issue is resolved in later releases. See references for vulnerability details...
GO-2026-6497 vulnerabilities
Vulnerabilities for packages: helm-set-status, kyverno-notation-aws, gitness, rancher-helm, maru, xeol, kube-arangodb, helm-mapkubeapis, flux-helm-controller, manifest-tool, kargo, cert-manager-cmctl, helm-push, k9s, opentofu, tigera-operator, k8sgpt, cluster-api-helm-controller...
GO-2026-6499 vulnerabilities
Vulnerabilities for packages: helm-set-status, kyverno-notation-aws, gitness, rancher-helm, maru, xeol, kube-arangodb, helm-mapkubeapis, flux-helm-controller, manifest-tool, kargo, cert-manager-cmctl, helm-push, k9s, opentofu, tigera-operator, k8sgpt, cluster-api-helm-controller...
GO-2026-6508 vulnerabilities
Vulnerabilities for packages: falcosidekick, distribution, caddy, aws-otel-collector, pulumi-kubernetes-operator, zot, datadog-agent, mcp-grafana, opentofu, kots, fluent-bit-plugin-loki, harbor-registry, grafana, grafana-pyroscope, amazon-cloudwatch-agent, grafana-mimir, loki, tempo, grafana-allo...
The vulnerability of the OpenTofu infrastructure management tool is related to the presence of a vulnerability in the borrowed component, which allows a attacker to trigger a service failure.
The vulnerability of the OpenTofu infrastructure management tool is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities can allow a malicious actor, operating remotely, to cause service failures...
CVE-2026-81871 vulnerabilities
Vulnerabilities for packages: opentelemetry-go-instrumentation-fips, grafana-pyroscope, falcosidekick-fips, terraform, kots, dynatrace-operator-fips, google-cloud-otel-ops-collector, caddy-fips, amazon-cloudwatch-agent, frankenphp-8.2, grafana-geomys-fips, grafana-mimir, percona-grafana,...
CLEANSTART-2026-CV85257 Security fix for ghsa-jc7w-c686-c4v9 applied in: gptscript 0.6.0-r0, gptscript 0.7.1-r0, gptscript 0.8.5-r0, opentofu-fips 1.10.7-r0, opentofu-fips 1.10.7-r1
ghsa-jc7w-c686-c4v9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-BJ71317 Security fix for ghsa-wjrx-6529-hcj3 applied in: atlantis 0.37.1-r1, atlantis-fips 0.37.1-r0, opentofu-fips 1.10.7-r0, opentofu-fips 1.10.7-r1
ghsa-wjrx-6529-hcj3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-LK31103 Security fix for CVE-2025-52894 applied in: opentofu-fips 1.10.7-r1, opentofu-fips 1.10.7-r2
CVE-2025-52894 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-MI15449 Security fix for ghsa-r92c-9c7f-3pj8 applied in: opentofu-fips 1.11.4-r0
Security vulnerability affects the opentofu-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-TK35937 Security fix for CVE-2024-10006 applied in: opentofu-fips 1.10.9-r0, opentofu-fips 1.7.10-r1, opentofu-fips 1.8.11-r1, rundeck 6.0.0-r0
CVE-2024-10006 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-AW78522 Security fix for CVE-2024-10005 applied in: opentofu-fips 1.10.9-r0, opentofu-fips 1.7.10-r1, opentofu-fips 1.8.11-r1, rundeck 6.0.0-r0
CVE-2024-10005 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101120
Security vulnerability affects the opentofu-fips package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-14978 vulnerabilities
Vulnerabilities for packages: opentofu, terraform, terraform-mcp-server...
GHSA-92X3-5H48-MFHX vulnerabilities
Vulnerabilities for packages: opentofu, terraform, terraform-mcp-server...
GHSA-92X3-5H48-MFHX vulnerabilities
Vulnerabilities for packages: vault-fips, opentofu, vault, terraform-fips, opentofu-fips, terraform-mcp-server, helmfile, terraform, terraform-ls...
CVE-2026-14978 vulnerabilities
Vulnerabilities for packages: vault-fips, opentofu, vault, terraform-fips, opentofu-fips, terraform-mcp-server, helmfile, terraform, terraform-ls...
ROS-20260902-73-0014
The vulnerability in opentofu relates to the use of a name with an incorrect reference. Exploiting this vulnerability can allow a hacker to cause a service failure...
GO-2026-6262 OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers in github.com/opentofu/opentofu
OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers in github.com/opentofu/opentofu...