opentofu-fips-1.11

Direct Vulnerabilities

Known vulnerabilities in the opentofu-fips-1.11 package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L Server-Side Request Forgery (SSRF)	<1.11.13-r2
L Directory Traversal	<1.11.13-r2
L Improper Certificate Validation	*
L Information Exposure	*
L Improper Validation of Array Index	*
L Improper Handling of Case Sensitivity	*
L CVE-2026-56855	*
L CVE-2026-78662	*
L Resource Exhaustion	*
L CVE-2026-56854	<1.11.13-r4
H CVE-2022-30322	*
L GO-2026-5932	*
L GHSA-xmrv-pmrh-hhx2	*
L Race Condition	*
L Uncontrolled Memory Allocation	*
H CVE-2022-30323	*
H Directory Traversal	*
L CVE-2026-56860	<1.11.13-r4
L CVE-2026-56864	<1.11.13-r4
L CVE-2026-56853	<1.11.13-r4
L CVE-2026-56862	<1.11.13-r4
L CVE-2026-56859	<1.11.13-r4
L CVE-2026-56865	<1.11.13-r4
L CVE-2026-56858	<1.11.13-r4
L CVE-2026-33818	<1.11.13-r4
L GHSA-259r-337f-4rfw	<1.11.13-r3
L Directory Traversal	<1.11.13-r2
L Uncontrolled Memory Allocation	<1.11.13-r2
L External Control of File Name or Path	<1.11.13-r1
C CVE-2026-1229	<1.11.13-r1
L Cleartext Transmission of Sensitive Information	<1.11.13-r1
L Server-Side Request Forgery (SSRF)	<1.11.13-r1
L Improper Restriction of Rendered UI Layers or Frames	<1.11.13-r1
H Integer Overflow or Wraparound	<1.11.13-r1
L GHSA-vh4v-2xq2-g5cg	<1.11.13-r1
L GHSA-hrxh-6v49-42gf	<1.11.13-r1
L CVE-2026-39821	<1.11.13-r1
L CVE-2026-56852	<1.11.13-r1
L Improper Restriction of Rendered UI Layers or Frames	<1.11.13-r1
L Resource Exhaustion	<1.11.13-r1
H Untrusted Search Path	<1.11.13-r1
L Improper Restriction of Rendered UI Layers or Frames	<1.11.13-r1
L CVE-2026-46600	<1.11.13-r1
L Cross-site Scripting (XSS)	<1.11.13-r1