OpenTofu: Provider cache installation follows root-module-controlled package directory symlink and writes outside the working tree
Moderate severity
GitHub Reviewed
Published
May 21, 2026
in
opentofu/opentofu
•
Updated Jun 23, 2026
Give feedback on Dependabot alerts