github.com/hashicorp/go-getter vulnerabilities (Go)

10 vulnerabilities.

• github.com/hashicorp/go-getter Go Go-getter may allow to arbitrary filesystem reads through git operations CVE-2026-4660 Public exploitFix available 7.5 HighApril 9, 2026
• github.com/hashicorp/go-getter Go HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack CVE-2025-8959 Fix available 7.5 HighAugust 15, 2025
• github.com/hashicorp/go-getter Go HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation CVE-2024-6257 Fix available 8.4 HighJune 25, 2024
• github.com/hashicorp/go-getter Go HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches CVE-2024-3817 Fix available 9.8 CriticalApril 17, 2024
• github.com/hashicorp/go-getter Go Go-Getter Vulnerable to Decompression Bombs CVE-2023-0475 Fix available 4.2 MediumFebruary 16, 2023
• github.com/hashicorp/go-getter Go HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion CVE-2022-30323 Fix available 8.6 HighMay 25, 2022
• github.com/hashicorp/go-getter Go HashiCorp go-getter unsafe downloads could lead to arbitrary host access CVE-2022-30322 Fix available 8.6 HighMay 25, 2022
• github.com/hashicorp/go-getter Go HashiCorp go-getter unsafe downloads CVE-2022-30321 Fix available 8.6 HighMay 25, 2022
• github.com/hashicorp/go-getter Go HashiCorp go-getter command injection CVE-2022-26945 Fix available 9.8 CriticalMay 25, 2022
• github.com/hashicorp/go-getter Go Insertion of Sensitive Information into Log File in Hashicorp go-getter CVE-2022-29810 Fix available 5.5 MediumApril 27, 2022