Skip to content

OpenTofu: Excessive resource usage in "tofu init" when installing dependencies from attacker-controlled server

Low severity GitHub Reviewed Published May 14, 2026 in opentofu/opentofu • Updated May 20, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts