| CVE-2026-19585 |
HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal…
|
5.3
Moyenne
|
8 oct. 2026 |
| CVE-2026-88922 |
The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive…
|
6.7
Moyenne
|
15 sept. 2026 |
| CVE-2026-14362 |
HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in its push/pull state handling…
|
4.9
Moyenne
|
8 juil. 2026 |
| CVE-2026-8052 |
HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host…
|
6.0
Moyenne
|
12 mai 2026 |
| CVE-2026-0969 |
The serialize function used to compile MDX in next-mdx-remote is vulnerable to arbitrary code execution due to…
|
8.8
Élevée
|
12 févr. 2026 |
| CVE-2025-8959 |
HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized…
|
7.5
Élevée
|
15 août 2025 |
| CVE-2025-0377 |
HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted…
|
7.5
Élevée
|
21 janv. 2025 |
| CVE-2024-6257 |
HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git…
|
8.4
Élevée
|
25 juin 2024 |
| CVE-2024-6104 |
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file
|
6.0
Moyenne
|
24 juin 2024 |
| CVE-2024-3817 |
HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches
|
9.8
Critique
|
17 avr. 2024 |