Vulnerabilities (CVE)

Filtered by vendor Hashicorp Subscribe
Filtered by product Go-getter
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-30321 1 Hashicorp 1 Go-getter 2023-08-08 7.5 HIGH 8.6 HIGH
go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws. Fixed in 1.6.1 and 2.1.0.