Product by Go
Github.com/opentofu/opentofu
3 known vulnerabilities in Github.com/opentofu/opentofu (Go), 0 of them actively exploited (CISA KEV).
Key figures
3
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-58375 | OpenTofu before 1.8.3 Secret Variable Leaking via Static Evaluation | 7.5 | |
| High | CVE-2026-74796 | OpenTofu before 1.11.7 Symlink Following Path Traversal | 6.1 | |
| Low | CVE-2026-74797 | OpenTofu before 1.11.4 Denial of Service via malicious zip | 3.1 |