Skip to content
fr Sign in
9.8 Critical

CVE-2024-3817 HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches

Description

HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. This vulnerability does not affect the go-getter/v2 branch and package.

Affected products and versions

Product Affected versions Fixed in
Shared library 1.5 1.5.9 → < 1.7.3 1.7.3
go-getter 1.5 1.5.9 → < 1.7.3 1.7.3

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Shared library

The 10 CVEs of Shared library →
CVE-2026-19585 HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal… 5.3 Medium CVE-2026-88922 The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive… 6.7 Medium CVE-2026-14362 HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in its push/pull state handling… 4.9 Medium CVE-2026-8052 HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host… 6.0 Medium
Track this CVE