CVE-2024-58375
2 advisories.
Go/github.com/opentofu/opentofu CVE-2024-58375: low 3.7, EPSS 0.43%
OpenTofu potential leaking of secret variable values when using static evaluation in v1.8
Action: Upgrade github.com/opentofu/opentofu to 1.8.3 or later.
go get github.com/opentofu/opentofu@v1.8.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.8.0 | 1.8.3 | - |
Fixed versions
| 1.8.3 |
Sources
- osv: GHSA-wpr2-j6gr-pjw9
- https://github.com/opentofu/opentofu/security/advisories/GHSA-wpr2-j6gr-pjw9
- https://github.com/opentofu/opentofu
- https://pkg.go.dev/vuln/GO-2024-3182
CVE-2024-58375 · published · modified · JSON
Go/github.com/opentofu/opentofu CVE-2024-58375: high 7.5, EPSS 0.43%
OpenTofu potential leaking of secret variable values when using static evaluation in v1.8 in github.com/opentofu/opentofu
Action: Upgrade github.com/opentofu/opentofu to 1.8.3 or later.
go get github.com/opentofu/opentofu@v1.8.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.8.0 | 1.8.3 | - |
Fixed versions
| 1.8.3 |
Sources
- osv: GO-2024-3182
- nvd: CVE-2024-58375
- https://github.com/opentofu/opentofu/security/advisories/GHSA-wpr2-j6gr-pjw9
CVE-2024-58375 · published · modified · JSON