golang-github-jesseduffield-go-getter

2 results · Clear filters · Feed

• High 8.4
  CVE-2024-6257

  HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation

  HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git Configuration, potentially leading to arbitrary code execution.

  HashiCorp Shared library zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  Jun 25, 2024
• High 8.6
  CVE-2022-26945

  HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion

  go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.0.

  golang-github-hashicorp-go-getter golang-github-hashicorp-go-getter github.com/hashicorp/go-getter golang-github-jesseduffield-go-getter Debian Ubuntu Go
  May 25, 2022