MEDIUM5.5Go
GHSA-27rq-4943-qcwp· CVE-2022-29810, GO-2022-0438Insertion of Sensitive Information into Log File in Hashicorp go-getter
Modified: 11/8/2023
package
Go/github.com/hashicorp/go-getter
pkg:go/github.com/hashicorp/go-getter
HIGH8.6Go
GHSA-28r2-q6m8-9hpx· CVE-2022-26945, CVE-2022-30321HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion
Modified: 5/20/2024
HIGH7.5Go
GHSA-92mm-2pjq-r785· CVE-2026-4660, GO-2026-5058HashiCorp's go-getter library may allow arbitrary file reads
Modified: 9/10/2026
HIGH8.6Go
GHSA-cjr4-fv6c-f3mv· CVE-2022-26945, CVE-2022-30321HashiCorp go-getter unsafe downloads could lead to arbitrary host access
Modified: 5/20/2024
HIGH8.6Go
GHSA-fcgg-rvwg-jv58· CVE-2022-26945, CVE-2022-30321HashiCorp go-getter unsafe downloads
Modified: 3/15/2024
MEDIUM4.2Go
GHSA-jpxj-2jvg-6jv9· CVE-2023-0475, GO-2023-1578Data Amplification in HashiCorp go-getter
Modified: 5/20/2024
CRITICAL9.8Go
GHSA-q64h-39hv-4cf7· CVE-2024-3817, GO-2024-2800HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches
Modified: 9/10/2026
HIGH7.5Go
GHSA-wjrx-6529-hcj3· CVE-2025-8959, GO-2025-3892HashiCorp go-getter Vulnerable to Symlink Attacks
Modified: 9/10/2026
CRITICAL9.8Go
GHSA-x24g-9w7v-vprh· CVE-2022-26945, CVE-2022-30321HashiCorp go-getter command injection
Modified: 3/15/2024
HIGH8.4Go
GHSA-xfhp-jf8p-mh5w· CVE-2024-6257, GO-2024-2948HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation
Modified: 9/10/2026
—Go
GO-2022-0438· CVE-2022-29810, GHSA-27rq-4943-qcwpExposure of sensitive information via log file in github.com/hashicorp/go-getter
Modified: 5/20/2024
—Go
GO-2022-0586· CVE-2022-26945, CVE-2022-30321Resource exhaustion in github.com/hashicorp/go-getter and related modules
Modified: 5/20/2024
—Go
GO-2023-1578· CVE-2023-0475, GHSA-jpxj-2jvg-6jv9Denial of service in github.com/hashicorp/go-getter/v2
Modified: 5/20/2024
—Go
GO-2024-2800· CVE-2024-3817, GHSA-q64h-39hv-4cf7Argument injection when fetching remote default Git branches in github.com/hashicorp/go-getter
Modified: 2/4/2026
—Go
GO-2024-2948· CVE-2024-6257, GHSA-xfhp-jf8p-mh5wCode Execution on Git update in github.com/hashicorp/go-getter
Modified: 2/4/2026
—Go
GO-2025-3892· CVE-2025-8959, GHSA-wjrx-6529-hcj3HashiCorp go-getter Vulnerable to Symlink Attacks in github.com/hashicorp/go-getter
Modified: 2/4/2026
—Go
GO-2026-5058· CVE-2026-4660, GHSA-92mm-2pjq-r785HashiCorp's go-getter library may allow arbitrary file reads in github.com/hashicorp/go-getter
Modified: 7/2/2026