1 matches found
GHSA-92MM-2PJQ-R785 HashiCorp's go-getter library may allow arbitrary file reads
HashiCorp's go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This is fixed in go-getter v1.8.6. This vulnerability does not affect the go-getter/v2 branch and package...
7.5CVSS5.8AI score0.00583EPSS
SaveExploits1References3
20