Product by HashiCorp
Shared Library
10 known vulnerabilities in Shared Library (HashiCorp), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-3817 | HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches | 9.8 | |
| High | CVE-2026-0969 | Arbitrary code execution in React server-side rendering of untrusted MDX content | 8.8 | |
| High | CVE-2024-6257 | HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation | 8.4 | |
| Critical | CVE-2025-0377 | HashiCorp go-slug Vulnerable to Zip Slip Attack | 7.5 | |
| High | CVE-2025-8959 | HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack | 7.5 | |
| Medium | CVE-2026-88922 | Go-getter vulnerable to a privilege escalation issue in its archive decompression handling | 6.7 | |
| Medium | CVE-2026-19585 | Go-getter vulnerable to a path traversal in S3/GCS directory download handling | 5.3 | |
| Medium | CVE-2026-8052 | HashiCorp Shared library: Link Following | 6.0 | |
| Medium | CVE-2026-14362 | Denial of service via crafted push/pull gossip message in memberlist | 4.9 | |
| Medium | CVE-2024-6104 | go-retryablehttp can leak basic auth credentials to log files | 6.0 |