{"action":"Upgrade github.com/opentofu/opentofu to 1.8.3 or later.","affected":[{"fixed":"1.8.3","introduced":"1.8.0"}],"component":"github.com/opentofu/opentofu","cve_ids":["CVE-2024-58375"],"ecosystem":"Go","epss":0.00432,"exploited":false,"fixed_versions":["1.8.3"],"ghsa_id":"GHSA-wpr2-j6gr-pjw9","id":"tcs_01M5KFQZRP26DWPQ1KVV2N17WG","modified_at":"2026-08-17T03:55:42.801423615Z","published_at":"2024-10-03T16:51:50Z","references":["https://osv.dev/vulnerability/GHSA-wpr2-j6gr-pjw9","https://github.com/opentofu/opentofu/security/advisories/GHSA-wpr2-j6gr-pjw9","https://github.com/opentofu/opentofu","https://pkg.go.dev/vuln/GO-2024-3182"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-wpr2-j6gr-pjw9","url":"https://osv.dev/vulnerability/GHSA-wpr2-j6gr-pjw9"}],"summary":"OpenTofu potential leaking of secret variable values when using static evaluation in v1.8"}