5.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
The Hashicorp go-getter library before 1.5.11 does not redact an SSH key from a URL query parameter.
github.com/hashicorp/go-getter/commit/36b68b2f68a3ed10ee7ecbb0cb9f6b1dc5da49cc
github.com/hashicorp/go-getter/pull/348
github.com/hashicorp/go-getter/releases/tag/v1.5.11