github.com/hashicorp/go-getter/s3/v2
Package for downloading things from a string URL using a variety of protocols.
View on Github
Activity
- Latest release
- 2d ago
- Total releases
- 8
- Cadence
- ~2 months
- Last 12 months
- 1
Reach
- Stars
- 1.8k
Details
- First release
- Mar 21, 2022
| Version | Released | |
|---|---|---|
v2.2.4
patch
|
v2.2.4
patch
Dependencies (6)
|
|
v2.2.3
patch
|
v2.2.3
patch
Dependencies (2)
|
|
v2.2.2
patch
|
v2.2.2
patch
Dependencies (2)
|
|
v2.2.1
patch
|
v2.2.1
patch
Dependencies (2)
|
|
v2.2.0
minor
|
v2.2.0
minor
Dependencies (2)
|
|
v2.1.1
patch
|
v2.1.1
patch
Dependencies (2)
|
|
v2.1.0
minor
|
v2.1.0
minor
Dependencies (2)
|
|
v2.0.2
initial
1 CVE
CVE-2022-26945
GHSA-28r2-q6m8-9hpx
CVE-2022-30321
CVE-2022-30322
CVE-2022-30323
GHSA-cjr4-fv6c-f3mv
GHSA-fcgg-rvwg-jv58
GHSA-x24g-9w7v-vprh
GO-2022-0586
May 26, 2022
HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion
8.6
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
High
HashiCorp go-getter through 2.0.2 does not safely perform downloads. Asymmetric resource exhaustion could occur when go-getter processed malicious HTTP responses. Fixed in
2.1.0
References
Updated May 20, 2024 · Source: OSV.dev |
v2.0.2
initial
Dependencies (2)
|