Skip to content
OpenAdvisories

Package · Go

github.com/hashicorp/vagrant

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.8
    CVE-2023-5834

    Vagrant’s Windows Installer Allowed Directory Junction Write

    HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0.

    HashiCorp Vagrant github.com/hashicorp/vagrant Go