CVE-2026-118761

A flaw was found in Kubeflow Pipelines. The API server does not properly restrict the size of decompressed data when processing uploaded archive files, performing decompression before authorization checks are completed. A remote, unauthenticated attacker could exploit this vulnerability by...

Vulnerability related to Apple macOS permission licensing and access control issues

Versions of Apple macOS Golden Gate prior to 27.2 contain a privilege escalation and access control vulnerability. This vulnerability stems from improper access restrictions; attempting to decompress maliciously crafted archive files may result in unintended termination of the application or...

Amazon Web Services Multi Model Server path traversal vulnerability

Amazon Web Services Multi Model Server versions 1.1.11 and earlier contain a path traversal vulnerability. This vulnerability arises from relative path traversal during the decompression of model archives, potentially allowing remote attackers to execute arbitrary code via specially crafted model...

SUSE-SU-2026:4444-1 Security update for terraform-provider-susepubliccloud

This update for terraform-provider-susepubliccloud fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches bsc1279252. - CVE-2026-84304:...

CentOS Linux 8.4 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1779583115)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1779583115 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the...

Linux Distros Unpatched Vulnerability : CVE-2026-88922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafte...

SUSE CVE-2026-88922

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extraction is performed by a privileged user, this...

github.com/hashicorp/go-getter: Go-getter: Privilege escalation via crafted archive decompression

A flaw was found in the go-getter library. This vulnerability allows a local attacker to escalate privileges by providing a specially crafted archive. When a privileged user extracts this archive, files can be created with elevated permission bits, enabling the attacker to gain the privileges of...

github.com/hashicorp/go-getter: Go-getter: Privilege escalation via crafted archive decompression

A flaw was found in the go-getter library. This vulnerability allows a local attacker to escalate privileges by providing a specially crafted archive. When a privileged user extracts this archive, files can be created with elevated permission bits, enabling the attacker to gain the privileges of...

github.com/hashicorp/go-getter: Go-getter: Privilege escalation via crafted archive decompression

A flaw was found in the go-getter library. This vulnerability allows a local attacker to escalate privileges by providing a specially crafted archive. When a privileged user extracts this archive, files can be created with elevated permission bits, enabling the attacker to gain the privileges of...

github.com/hashicorp/go-getter: Go-getter: Privilege escalation via crafted archive decompression

A flaw was found in the go-getter library. This vulnerability allows a local attacker to escalate privileges by providing a specially crafted archive. When a privileged user extracts this archive, files can be created with elevated permission bits, enabling the attacker to gain the privileges of...

github.com/hashicorp/go-getter: Go-getter: Privilege escalation via crafted archive decompression

A flaw was found in the go-getter library. This vulnerability allows a local attacker to escalate privileges by providing a specially crafted archive. When a privileged user extracts this archive, files can be created with elevated permission bits, enabling the attacker to gain the privileges of...

Security Bulletin: Go-getter vulnerable to a privilege escalation issue in its archive decompression handling

Summary The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extraction is performed by a privileged use...

AZL-103254 CVE-2026-88922 affecting package packer 1.9.5-23

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extraction is performed by a privileged user, this...

CVE-2026-88922

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extraction is performed by a privileged user, this...

DEBIAN-CVE-2026-88922

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extraction is performed by a privileged user, this...

CVE-2026-88922 Go-getter vulnerable to a privilege escalation issue in its archive decompression handling

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extraction is performed by a privileged user, this...

CVE-2026-88922

go-getter (HashiCorp), a library used for fetching and extracting files, is vulnerable to a privilege escalation in its archive decompression handling in versions up to 1.8.8 and 2.2.3 . A crafted archive may cause extracted files to be created with elevated permission bits. When extraction is pe...

CVE-2026-88922 Go-getter vulnerable to a privilege escalation issue in its archive decompression handling

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extraction is performed by a privileged user, this...

EUVD-2026-79245

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extraction is performed by a privileged user, this...