| CVE-2026-19585 |
HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal…
|
5.3
Medium
|
Oct 8, 2026 |
| CVE-2026-88922 |
The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive…
|
6.7
Medium
|
Sep 15, 2026 |
| CVE-2026-14362 |
HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in its push/pull state handling…
|
4.9
Medium
|
Jul 8, 2026 |
| CVE-2026-8052 |
HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host…
|
6.0
Medium
|
May 12, 2026 |
| CVE-2026-0969 |
The serialize function used to compile MDX in next-mdx-remote is vulnerable to arbitrary code execution due to…
|
8.8
High
|
Feb 12, 2026 |
| CVE-2025-8959 |
HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized…
|
7.5
High
|
Aug 15, 2025 |
| CVE-2025-0377 |
HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted…
|
7.5
High
|
Jan 21, 2025 |
| CVE-2024-6257 |
HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git…
|
8.4
High
|
Jun 25, 2024 |
| CVE-2024-6104 |
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file
|
6.0
Medium
|
Jun 24, 2024 |
| CVE-2024-3817 |
HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches
|
9.8
Critical
|
Apr 17, 2024 |