Open Source Opentofu vulnerabilities

• open source opentofu OpenTofu before 1.11.7 Symlink Following Path Traversal CVE-2026-74796 Fix available 7.0 HighJune 23, 2026
• open source opentofu OpenTofu before 1.11.4 Denial of Service via malicious zip CVE-2026-74797 Fix available 2.3 LowJanuary 21, 2026
• open source opentofu OpenTofu before 1.8.3 Secret Variable Leaking via Static Evaluation CVE-2024-58375 Fix available 8.7 HighOctober 3, 2024