github.com/hashicorp/go-getter/s3/v2
Package for downloading things from a string URL using a variety of protocols.
View on Github
Activity
- Latest release
- 1w ago
- Total releases
- 10
- Cadence
- ~2 months
- Last 12 months
- 3
Reach
- Stars
- 1.8k
Details
- First release
- Mar 21, 2022
| Version | Released | |
|---|---|---|
v2.2.6
patch
|
v2.2.6
patch
Dependencies (6)
|
|
v2.2.5
patch
|
v2.2.5
patch
Dependencies (6)
|
|
v2.2.4
patch
|
v2.2.4
patch
Dependencies (6)
|
|
v2.2.3
patch
|
v2.2.3
patch
Dependencies (2)
|
|
v2.2.2
patch
|
v2.2.2
patch
Dependencies (2)
|
|
v2.2.1
patch
|
v2.2.1
patch
Dependencies (2)
|
|
v2.2.0
minor
|
v2.2.0
minor
Dependencies (2)
|
|
v2.1.1
patch
|
v2.1.1
patch
Dependencies (2)
|
|
v2.1.0
minor
|
v2.1.0
minor
Dependencies (2)
|
|
v2.0.2
initial
1 CVE
CVE-2022-26945
GHSA-fcgg-rvwg-jv58
CVE-2022-30321
CVE-2022-30322
CVE-2022-30323
GHSA-28r2-q6m8-9hpx
GHSA-cjr4-fv6c-f3mv
GHSA-x24g-9w7v-vprh
GO-2022-0586
May 26, 2022
HashiCorp go-getter unsafe downloads
8.6
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
High
HashiCorp go-getter through 2.0.2 does not safely perform downloads. Protocol switching, endless redirect, and configuration bypass were possible via abuse of custom HTTP response header processing. Fixed in
2.1.0
References
Updated Mar 15, 2024 · Source: OSV.dev |
v2.0.2
initial
Dependencies (2)
|