Junglewise Threat Intelligence

CVE-2022-30322: GO-2022-0586 - Resource exhaustion in github.com/hashicorp/go-getter and related modules

CVE-2022-30322 · Severity: low · CVSS 3.1 · Published 2022-05-26

Technologies: github.com/hashicorp/go-getter (Go). Vendors: Go.

Executive brief

Resource exhaustion in github.com/hashicorp/go-getter and related modules

Affected products

  • Go github.com/hashicorp/go-getter/v2
  • Go github.com/hashicorp/go-getter
  • Go github.com/hashicorp/go-getter/s3/v2
  • Go github.com/hashicorp/go-getter/gcs/v2

CVE identifiers

  • CVE-2022-30322
  • CVE-2022-26945
  • CVE-2022-30323
  • CVE-2022-30321

Related threats