github.com/hashicorp/go-getter/s3/v2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.6

CVE-2022-26945

HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion

go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.0.

golang-github-hashicorp-go-getter golang-github-hashicorp-go-getter golang-github-jesseduffield-go-getter github.com/hashicorp/go-getter Debian Ubuntu Go

May 25, 2022