Vulnerabilities of HashiCorp go-getter
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-3817 | HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches | 9.8 Critical | Apr 17, 2024 |
| CVE-2023-0475 | HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs | 4.2 Medium | Feb 16, 2023 |