UNKNOWN Go
OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers in github.com/opentofu/opentofu
GO-2026-6262 · GHSA-22w5-2fxg-vrwx
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers in github.com/opentofu/opentofu
References
- ADVISORY https://github.com/opentofu/opentofu/security/advisories/GHSA-22w5-2fxg-vrwx
- REPORT https://github.com/opentofu/opentofu/issues/4242
- REPORT https://github.com/opentofu/opentofu/issues/4243
- REPORT https://github.com/opentofu/opentofu/issues/4244
- WEB https://github.com/opentofu/opentofu/releases/tag/v1.11.9
- WEB https://github.com/opentofu/opentofu/releases/tag/v1.12.2
Ready to move
Start Securing
Free, no credit card | First findings in minutes