Lucene search
+L

1 matches found

OSV
OSV
added 2025/08/15 9:31 p.m.9 views

GHSA-WJRX-6529-HCJ3 HashiCorp go-getter Vulnerable to Symlink Attacks

HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...

7.5CVSS6.7AI score0.00543EPSS
SaveExploits0References5
Rows per page
Query Builder