Hashicorp Shared Library vulnerabilities

• hashicorp shared library Go-getter vulnerable to a path traversal in S3/GCS directory download handling CVE-2026-19585 Fix available 5.3 MediumOctober 8, 2026
• hashicorp shared library Go-getter vulnerable to a privilege escalation issue in its archive decompression handling CVE-2026-88922 Fix available 6.7 MediumSeptember 15, 2026
• hashicorp shared library Denial of service via crafted push/pull gossip message in memberlist CVE-2026-14362 4.9 MediumJuly 8, 2026
• hashicorp shared library Nomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack CVE-2026-8052 Fix available 6.0 MediumMay 12, 2026
• hashicorp shared library Arbitrary code execution in React server-side rendering of untrusted MDX content CVE-2026-0969 Fix available 8.8 HighFebruary 12, 2026
• hashicorp go-getter, shared library +1 more HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack CVE-2025-8959 Fix available 7.5 HighAugust 15, 2025
• hashicorp go-slug, shared library +1 more HashiCorp go-slug Vulnerable to Zip Slip Attack CVE-2025-0377 Fix available 7.5 HighJanuary 21, 2025
• hashicorp go-getter, shared library +1 more HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation CVE-2024-6257 Fix available 8.4 HighJune 25, 2024
• hashicorp retryablehttp, shared library +1 more go-retryablehttp can leak basic auth credentials to log files CVE-2024-6104 Fix available 6.0 MediumJune 24, 2024
• hashicorp go-getter, shared library +1 more HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches CVE-2024-3817 Fix available 9.8 CriticalApril 17, 2024