{"schema_version":"1.7.3","id":"CGA-95vj-48rh-pq79","published":"2026-01-15T12:53:40.078645Z","modified":"2026-09-07T02:03:40.630128768Z","withdrawn":"2026-09-07T02:03:40.630128584Z","related":["CVE-2025-0377","GHSA-wpfp-cm49-9m9q","GO-2025-3413"],"affected":[{"package":{"name":"opentofu-1.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.6-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.6-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.6-local-provider-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.6-local-provider-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.7-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.7-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.7-local-provider-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.7-local-provider-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.8-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.8-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.8-local-provider-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.8-local-provider-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.9-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.9-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.9-local-provider-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.9-local-provider-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-fips-1.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-fips-1.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-fips-1.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-fips-1.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.7-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-fips-1.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-fips-1.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-fips-1.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-fips-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.7-r21"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-1.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-1.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-1.10-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-1.10-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-1.10-local-provider-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-1.10-local-provider-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-1.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-1.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-1.8-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-1.8-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-1.8-local-provider-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-1.8-local-provider-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-1.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-1.9-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-1.9-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-1.9-local-provider-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-1.9-local-provider-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-fips-1.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-fips-1.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-fips-1.10-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-fips-1.10-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-fips-1.10-local-provider-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-fips-1.10-local-provider-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-fips-1.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-fips-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-fips-1.9-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-fips-1.9-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-fips-1.9-local-provider-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-fips-1.9-local-provider-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-local-provider-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-local-provider-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.7-r36"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"vault-1.16","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.16"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"vault-1.16-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.16-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"vault-1.17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.6-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"vault-1.17-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.17-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.6-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"vault-1.18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"vault-1.18-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.18-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"vault-fips-1.17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-fips-1.17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.6-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"vault-fips-1.17-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-fips-1.17-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.6-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"vault-fips-1.18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-fips-1.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"vault-fips-1.18-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-fips-1.18-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.7","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.7-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.7-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.7-local-provider-config","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.7-local-provider-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.8","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.8-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.8-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.8-local-provider-config","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.8-local-provider-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.9","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.9-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.9-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"opentofu-1.9-local-provider-config","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.9-local-provider-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/terraform"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.7-r21"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/terraform-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}},{"package":{"name":"terraform-local-provider-config","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/terraform-local-provider-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.7-r36"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-95vj-48rh-pq79.json"}}]}