Bugzilla – Dependency tree for Bug 1227019
VUL-0: CVE-2024-6257: opentofu: hashicorp/go-getter: Arbitrary command execution through local git config file