Catalog / Terraform

1.16.6

todaysecurityfixeddeprecatedOriginal notes

1.16.6 (October 14, 2026)

BUG FIXES:

  • cloud: terraform init can now find workspaces selected by key/value tags whose keys contain uppercase letters. (#39306)

  • test: Allow module under test to use deprecated outputs. (#39207)

NOTES:

  • Prevent a HTTP/2 resource exhaustion via CVE-2026-78669. Exploitation would require a compromised (untrusted) provider/module registry. Such a threat is considered to be outside the perimeter of Terraform core security guarantees. (#39375)