Security
فارسی
All products

github.com/hashicorp/go-getter

Go · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HashiCorp's go-getter library may allow arbitrary file readsCVE-2026-4660 · GHSA-92MM-2PJQ-R785Version ranges need review. github.com/hashicorp/go-getterRed Hat Trusted Artifact Signer/redhat-user-workloads/cli-v08 GoRed Hat High Fix reported
HashiCorp go-getter Vulnerable to Symlink AttacksCVE-2025-8959 · GHSA-WJRX-6529-HCJ3Version ranges need review. github.com/hashicorp/go-getterRed Hat Trusted Application Pipeline/rhtap-task-runner/rhtap-task-runner-rhel9 GoRed Hat High Fix reported
HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config ManipulationCVE-2024-6257 · GHSA-XFHP-JF8P-MH5WVersion ranges need review. github.com/hashicorp/go-getterRed Hat Trusted Application Pipeline/rhtap-contract-tenant/cli-v01 GoRed Hat High Fix reported
HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git BranchesCVE-2024-3817 · GHSA-Q64H-39HV-4CF7Version ranges need review. github.com/hashicorp/go-getter Go Critical Fix reported
Data Amplification in HashiCorp go-getterCVE-2023-0475 · GHSA-JPXJ-2JVG-6JV9Version ranges need review. github.com/hashicorp/go-getter/v2github.com/hashicorp/go-getter GoRed Hat Medium Fix reported
HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustionCVE-2022-30323 · GHSA-28R2-Q6M8-9HPX github.com/hashicorp/go-getter/gcs/v2github.com/hashicorp/go-getter/s3/v2 GoRed Hat High Fix reported
HashiCorp go-getter unsafe downloads could lead to arbitrary host accessCVE-2022-30322 · GHSA-CJR4-FV6C-F3MV github.com/hashicorp/go-getter/gcs/v2github.com/hashicorp/go-getter/s3/v2 GoRed Hat High Fix reported
Insertion of Sensitive Information into Log File in Hashicorp go-getterCVE-2022-29810 · GHSA-27RQ-4943-QCWPVersion ranges need review. github.com/hashicorp/go-getterRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/cluster-curator-controller-rhel8 GoRed Hat Medium Fix reported
HashiCorp go-getter unsafe downloadsCVE-2022-30321 · GHSA-FCGG-RVWG-JV58 github.com/hashicorp/go-getter/gcs/v2github.com/hashicorp/go-getter/s3/v2 GoRed Hat High Fix reported
HashiCorp go-getter command injectionCVE-2022-26945 · GHSA-X24G-9W7V-VPRH github.com/hashicorp/go-getter/gcs/v2github.com/hashicorp/go-getter/s3/v2 GoRed Hat Critical Fix reported