9.8
Critique
CVE-2024-3817 HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches
Description
HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. This vulnerability does not affect the go-getter/v2 branch and package.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Shared library 1.5 | 1.5.9 → < 1.7.3 | 1.7.3 |
| go-getter 1.5 | 1.5.9 → < 1.7.3 | 1.7.3 |
Références
- discuss.hashicorp.com discuss.hashicorp.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Shared library
Les 10 CVE de Shared library →
CVE-2026-19585
HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal…
5.3
Moyenne
CVE-2026-88922
The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive…
6.7
Moyenne
CVE-2026-14362
HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in its push/pull state handling…
4.9
Moyenne
CVE-2026-8052
HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host…
6.0
Moyenne