ROOT-APP-GOBINARY-CVE-2024-6257 CVE-2024-6257 in github.com/hashicorp/go-getter - Patched by Root

Root has patched CVE-2024-6257 in the github.com/hashicorp/go-getter package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2025-8959 CVE-2025-8959 in github.com/hashicorp/go-getter - Patched by Root

Root has patched CVE-2025-8959 in the github.com/hashicorp/go-getter package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-4660 CVE-2026-4660 in github.com/hashicorp/go-getter - Patched by Root

Root has patched CVE-2026-4660 in the github.com/hashicorp/go-getter package for Root:Go. Multiple fixed versions available...

Security update for terraform-provider-susepubliccloud

This update for terraform-provider-susepubliccloud fixes the following issues: CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches bsc1279252. CVE-2026-84304:...

Command Injection

github.com/hashicorp/go-getter is vulnerable to Command Injection. The vulnerability is caused by improper handling of arguments in Git operations within getgit.go. This allows attackers to manipulate the Git configuration and execute arbitrary code...

Path Traversal

github.com/hashicorp/go-getter is vulnerable to path traversal. An attacker can access files outside the expected directory and download files or directories from various sources using malicious URLs by providing malicious inputs...