Product by Go
Github.com/hashicorp/go-getter
10 known vulnerabilities in Github.com/hashicorp/go-getter (Go), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-30321 | HashiCorp Shared library: Command Injection | 8.6 | |
| Critical | CVE-2022-26945 | HashiCorp Shared library: security vulnerability | 9.8 | |
| Critical | CVE-2024-3817 | HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches | 9.8 | |
| High | CVE-2022-30322 | HashiCorp Shared library: security vulnerability | 8.6 | |
| High | CVE-2022-30323 | HashiCorp Shared library: security vulnerability | 8.6 | |
| High | CVE-2026-4660 | Go-getter may allow to arbitrary filesystem reads through git operations | 7.5 | |
| High | CVE-2024-6257 | HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation | 8.4 | |
| High | CVE-2025-8959 | HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack | 7.5 | |
| Medium | CVE-2022-29810 | HashiCorp Shared library: security vulnerability | 5.5 | |
| Medium | CVE-2023-0475 | Go-Getter Vulnerable to Decompression Bombs | 4.2 |