{"action":"Upgrade github.com/opentofu/opentofu to 1.8.3 or later.","affected":[{"fixed":"1.8.3","introduced":"1.8.0"}],"component":"github.com/opentofu/opentofu","cve_ids":["CVE-2024-58375"],"ecosystem":"Go","epss":0.00432,"exploited":false,"fixed_versions":["1.8.3"],"ghsa_id":"GHSA-wpr2-j6gr-pjw9","id":"tcs_01M5KG5JXK4EVH94WX3N01WYZ3","modified_at":"2026-08-17T03:55:42.801423615Z","published_at":"2024-10-09T20:29:23Z","references":["https://osv.dev/vulnerability/GO-2024-3182","https://github.com/opentofu/opentofu/security/advisories/GHSA-wpr2-j6gr-pjw9"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GO-2024-3182","url":"https://osv.dev/vulnerability/GO-2024-3182"},{"source":"nvd","source_id":"CVE-2024-58375","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-58375"}],"summary":"OpenTofu potential leaking of secret variable values when using static evaluation in v1.8 in github.com/opentofu/opentofu"}