github.com/hashicorp/go-getter

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.2

CVE-2023-0475

Go-Getter Vulnerable to Decompression Bombs

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0.

HashiCorp go-getter golang-github-hashicorp-go-getter golang-github-hashicorp-go-getter Debian Ubuntu Go

Feb 16, 2023
Medium 5.5

CVE-2022-29810

Insertion of Sensitive Information into Log File in Hashicorp go-getter

The Hashicorp go-getter library before 1.5.11 does not redact an SSH key from a URL query parameter.

github.com/hashicorp/go-getter Go

Apr 27, 2022