{"id":"CGA-254j-jqm6-pj7c","modified":"2026-09-07T02:01:46.593301214Z","published":"2026-06-08T07:13:49Z","withdrawn":"2026-09-07T02:01:46.593300992Z","related":["GHSA-pxh5-6rrc-8rjv"],"affected":[{"package":{"name":"opentofu-1.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.10-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-254j-jqm6-pj7c.json"}},{"package":{"name":"opentofu-1.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-254j-jqm6-pj7c.json"}},{"package":{"name":"opentofu-fips-1.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-fips-1.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.10-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-254j-jqm6-pj7c.json"}},{"package":{"name":"opentofu-fips-1.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-fips-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-254j-jqm6-pj7c.json"}},{"package":{"name":"opentofu-1.10","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.10-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-254j-jqm6-pj7c.json"}},{"package":{"name":"opentofu-1.9","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-254j-jqm6-pj7c.json"}}],"schema_version":"1.7.5"}