Skip to content
OpenAdvisories
Medium · 5.5 CVE-2022-29810 EUVD-2022-1591GHSA-27rq-4943-qcwpGO-2022-0438

Insertion of Sensitive Information into Log File in Hashicorp go-getter

Published Apr 27, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Package: github.com/hashicorp/go-getter Ecosystem: Go

Description

The Hashicorp go-getter library before 1.5.11 does not redact an SSH key from a URL query parameter.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/hashicorp/go-getter < 1.5.11 1.5.11 GHSA-27rq-4943-qcwp

Advisories 1

References