Known vulnerabilities in go-getter

Vendor: HashiCorp
Software: go-getter
Software CPE: cpe:2.3:a:hashicorp:go-getter:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting go-getter go-getter is affected by 8 known vulnerabilities: 2 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95528 - Insufficient Verification of Data Authenticity
CVE-2024-6257
CWE-345 Low
No
No
1.7.5 08.08.2024 SB2024080809
SB2024080812
SB2024080813
and 4 more
#VU88829 - Argument Injection or Modification
CVE-2024-3817
CWE-88 High
No
No
1.7.4 19.04.2024 SB2024041913
SB2024041914
SB2024072506
#VU76005 - Resource Management Errors
CVE-2023-0475
CWE-399 Medium
No
No
1.7.0, 2.2.0 10.05.2023 SB2023051068
SB2023051069
SB2024022927
and 1 more
#VU64700 - Information Exposure Through Log Files
CVE-2022-29810
CWE-532 Low
No
No
1.5.11 27.06.2022 SB2022062827
SB2022062928
SB2022062931
and 4 more
#VU63815 - Improper input validation
CVE-2022-30323
CWE-20 Medium
No
No
1.6.1, 2.1.0 30.05.2022 SB2022053009
SB2022072127
SB2022083038
and 14 more
#VU63814 - Improper input validation
CVE-2022-30322
CWE-20 Medium
No
No
1.6.1, 2.1.0 30.05.2022 SB2022053009
SB2022072127
SB2022083038
and 14 more
#VU63811 - Improper input validation
CVE-2022-30321
CWE-20 Medium
No
No
1.6.1, 2.1.0 30.05.2022 SB2022053009
SB2022072127
SB2022083038
and 14 more
#VU63810 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-26945
CWE-78 High
No
No
1.6.1, 2.1.0 30.05.2022 SB2022053009
SB2022072127
SB2022083038
and 14 more