Packages / Debian 12 (Bookworm) / Source / golang / golang-github-hashicorp-go-getter
download from a URL using a variety of protocols
Matching against OpenFactory catalog package versions is in progress.
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-19585] Published: HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to be written outside th | Medium(5.3) | AffectedDetails (2)
|
| [CVE-2026-88922] Published: The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be | Medium(6.7) | AffectedDetails (2)
|
| [CVE-2026-4660] Published: HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CVE-2026-4660, is fixe | High(7.5) | AffectedDetails (2)
|
| [CVE-2025-8959] Published: golang-github-hashicorp-go-getter: CVE-2025-8959 | High(7.5) | AffectedDetails (2)
|
| [CVE-2024-6257] Published: golang-github-hashicorp-go-getter: CVE-2024-6257 | High(8.8) | AffectedDetails (2)
|
| [CVE-2023-0475] Published: golang-github-hashicorp-go-getter: CVE-2023-0475 | Medium(4.2) | AffectedDetails (2)
|
| [CVE-2022-26945] Published: golang-github-hashicorp-go-getter: CVE-2022-26945 | Critical(9.8) | AffectedDetails (2)
|
| [CVE-2022-30321] Published: golang-github-hashicorp-go-getter: CVE-2022-30321 | High(8.6) | AffectedDetails (2)
|
| [CVE-2022-30322] Published: golang-github-hashicorp-go-getter: CVE-2022-30322 | High(8.6) | AffectedDetails (2)
|
| [CVE-2022-30323] Published: golang-github-hashicorp-go-getter: CVE-2022-30323 | High(8.6) | AffectedDetails (2)
|
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2022-29810] Published: golang-github-hashicorp-go-getter: CVE-2022-29810 | Medium(5.1) | Not affectedDetails (2)
|
Last synced:
Authoritative source; repository metadata signature verified
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Authoritative source; repository metadata signature verified
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00