Executive brief
Denial of service in github.com/hashicorp/go-getter/v2
Affected products
- Go github.com/hashicorp/go-getter/v2
- Go github.com/hashicorp/go-getter
Junglewise Threat Intelligence
CVE-2023-0475: GO-2023-1578 - Denial of service in github.com/hashicorp/go-getter/v2
CVE-2023-0475 · Severity: low · CVSS 3.1 · Published 2023-02-17
Technologies: github.com/hashicorp/go-getter (Go). Vendors: Go.
Related threats
- HashiCorp go-getter arbitrary file read via argument injection in Git URLs
- GO-2025-3892 - HashiCorp go-getter Vulnerable to Symlink Attacks in github.com/hashicorp/go-getter
- GO-2024-2948 - Code Execution on Git update in github.com/hashicorp/go-getter
- GO-2024-2800 - Argument injection when fetching remote default Git branches in github.com/hashicorp/go-getter
- GO-2022-0438 - Exposure of sensitive information via log file in github.com/hashicorp/go-getter