Skip to content

OpenTofu has unbounded memory usage, high CPU usage, or deadlock in "tofu init" with maliciously-crafted dependency responses

Low severity GitHub Reviewed Published Apr 13, 2026 in opentofu/opentofu • Updated Apr 14, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts