Skip to content
OpenAdvisories

Package · Go

github.com/hashicorp/go-getter

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-3817

    HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches

    HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. This vulnerability does not affect the go-getter/v2 branch and package.

    HashiCorp Shared library zot kubescape Debian Ubuntu Azure Linux Wolfi Go