Upbound Official
provider-opentofu
By upboundLast changed 2 months ago
Availability
Community
Standard
Enterprise
Business Critical
Languages
Support
Upbound Supported
12 months window ends 2027/02/24
Security & Maintenance
CVE Remediation
Backporting
Upbound signed
Source Code
Notice something off about this package? Help us keep the marketplace safe and trustworthy by reporting inappropriate content or behavior.
Report this packageOverview
Crossplane provider to manage OpenTofu workspaces.
Summary
This release includes security vulnerability remediations.
Highlights
- Security Fixes: Updated Go version to 1.25.10 to remediate 11 CVE vulnerabilities (6 High, 5 Medium severity)
- CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811 (High)
- CVE-2026-42501 (High)
- CVE-2026-39817, CVE-2026-39826, CVE-2026-39825, CVE-2026-39823, CVE-2026-39819 (Medium)
- Updated CI workflow to use Go 1.25.10
All vulnerabilities were in the Go standard library and have been fully resolved in this release.