`github.com/hashicorp/go-getter`

Ecosystem:
go

Package URL:
pkg:golang/github.com/hashicorp/go-getter

Total PRs:
1,163 Dependabot PRs

Latest PR:
8 days ago

Unique Repositories:
559 repositories

Unique Repos (30 days):
31 repositories

Security Advisories

Data Amplification in HashiCorp go-getter

GHSA-jpxj-2jvg-6jv9 CVE-2023-0475 MODERATE published almost 3 years ago • updated 8 days ago

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0.

HashiCorp go-getter command injection

GHSA-x24g-9w7v-vprh CVE-2022-26945 CRITICAL published over 3 years ago • updated 11 days ago

HashiCorp go-getter before 2.0.2 allows Command Injection.

HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion

GHSA-28r2-q6m8-9hpx CVE-2022-30323 HIGH published over 3 years ago • updated 11 days ago

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Asymmetric resource exhaustion could occur when go-getter processed malicious ...

HashiCorp go-getter unsafe downloads could lead to arbitrary host access

GHSA-cjr4-fv6c-f3mv CVE-2022-30322 HIGH published over 3 years ago • updated 11 days ago

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Arbitrary host access was possible via go-getter path traversal, symlink proce...

Insertion of Sensitive Information into Log File in Hashicorp go-getter

GHSA-27rq-4943-qcwp CVE-2022-29810 MODERATE published over 3 years ago • updated 10 days ago

The Hashicorp go-getter library before 1.5.11 could write SSH credentials into its logfile, exposing sensitive credentials to local users able to r...

View all 9 advisories

Recent PRs

RSS Feed

Bump the go-modules group across 1 directory with 38 updates

paketo-buildpacks/go-dist #1100

1.7.9 → 1.7.10 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

AikidoSec/trivy #29

1.7.8 → 1.7.9 Patch PR

Open 3 months ago

chore: bump the go_modules group across 1 directory with 8 updates

helmwave/helmwave #1148

1.7.8 → 1.7.9 Patch PR

Open 3 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /provider

CrowdStrike/pulumi-crowdstrike #102

1.7.5 → 1.7.9 Patch PR

Open 3 months ago

Bump github.com/hashicorp/go-getter from 1.5.2 to 1.7.9 in /minikube-openebs/minikube-openiscsi

IBM/DeepRest #4

1.5.2 → 1.7.9 Minor PR

Open 3 months ago

chore(deps): bump the go group with 7 updates

mach-composer/mach-composer-cli #537

1.7.8 → 1.7.9 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump github.com/hashicorp/go-getter from 1.6.1 to 1.7.9

project-zot/trivy #380

1.6.1 → 1.7.9 Minor PR

Open 3 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /test/src

BrightDotAi/terraform-aws-msk-apache-kafka-cluster #2

1.7.5 → 1.7.9 Patch PR

Open 3 months ago 1 comment

chore(deps): bump github.com/hashicorp/go-getter from 1.6.2 to 1.7.9

ekmixon/aquasecurity-trivy #352

1.6.2 → 1.7.9 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump github.com/hashicorp/go-getter from 1.6.2 to 1.7.9

krol3/trivy #385

1.6.2 → 1.7.9 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the common group across 1 directory with 36 updates

goodtab/cptrivy #13

1.7.8 → 1.7.9 Patch PR

Open 3 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

zeta-chain/node #4148

1.7.8 → 1.7.9 Patch PR

Merged 3 months ago 1 comment

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /provider

sapslaj/pulumi-authentik #1

1.7.5 → 1.7.9 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump the common group across 1 directory with 57 updates

suryatmodulus/trivy #335

1.7.8 → 1.7.9 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the all-dependencies group across 1 directory with 17 updates

kemingy/envd #115

1.7.8 → 1.7.9 Patch PR

Closed 3 months ago 1 comment

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /provider

sapslaj/pulumi-infisical #1

1.7.5 → 1.7.9 Patch PR

Closed 3 months ago 1 comment

chore: bump the go_modules group with 4 updates

rancher-sandbox/sbombastic #410

1.7.8 → 1.7.9 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the common group across 1 directory with 34 updates

xycloops123/trivy #361

1.7.8 → 1.7.9 Patch PR

Open 3 months ago

chore(deps): bump the common group across 1 directory with 34 updates

sn0rlaxlife/trivy #78

1.7.8 → 1.7.9 Patch PR

Closed 3 months ago 1 comment

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /test

cookpad/terraform-aws-eks #389

1.7.5 → 1.7.9 Patch PR

Open 3 months ago

Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

cloudposse/atmos #1435

1.7.8 → 1.7.9 Patch PR

Open 3 months ago 5 comments

build(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

dopaemon/Learn_CosmicSDK #2

1.7.8 → 1.7.9 Patch PR

Open 3 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

jenkins-x-plugins/jx-gitops #1038

1.7.5 → 1.7.9 Patch PR

Open 3 months ago 6 comments

Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

paketo-buildpacks/yarn-install #1006

1.7.8 → 1.7.9 Patch PR

Merged 3 months ago

chore(deps): bump the dependencies group across 1 directory with 47 updates

Scalingo/terraform-provider-osc #284

1.7.8 → 1.7.9 Patch PR

Closed 3 months ago 2 comments

build(deps): Bump the go_modules group across 24 directories with 6 updates

JohnDaWalka/cosmos-sdk #3

1.7.6 → 1.7.9 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the go_modules group across 1 directory with 5 updates

nullroute-commits/trivy #1

1.7.8 → 1.7.9 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

Scalingo/terraform-provider-osc #283

1.7.8 → 1.7.9 Patch PR

Merged 3 months ago

Bump the go_modules group in /x/upgrade with 5 updates

mian4671/Faisal-maqsood #547

1.7.8 → 1.7.9 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the go_modules group with 4 updates

joseguzman1337/trivy #910

1.7.8 → 1.7.9 Patch PR

Merged 3 months ago 1 comment

Bump the go_modules group across 1 directory with 9 updates

NethermindEth/dydx-v4-chain-fork #1

1.7.5 → 1.7.9 Patch PR

Open 3 months ago

⬆️ (deps-test): Bump the go_modules group in /modules/dns-record/test with 5 updates

bendoerr-terraform-modules/terraform-aws-fargate-on-demand #304

1.7.5 → 1.7.9 Patch PR

Open 3 months ago 2 comments

Bump the go_modules group with 2 updates

wakeful/atlantis-gen-yaml #15

1.7.8 → 1.7.9 Patch PR

Open 3 months ago

⬆️ (deps-test): Bump the go_modules group in /modules/notice-discord/test with 5 updates

bendoerr-terraform-modules/terraform-aws-fargate-on-demand #302

1.7.5 → 1.7.9 Patch PR

Open 3 months ago

chore(deps): bump the go_modules group across 1 directory with 5 updates

cloudposse/terraform-aws-acm-request-certificate #94

1.7.5 → 1.7.9 Patch PR

Open 3 months ago

Bump the go_modules group across 1 directory with 6 updates

pbs-common/terraform-aws-lambda-event-source-mapping-module #32

1.7.1 → 1.7.9 Patch PR

Open 3 months ago

Bump the go_modules group across 1 directory with 6 updates

pbs-common/terraform-aws-template-v2 #59

1.7.1 → 1.7.9 Patch PR

Open 3 months ago

Bump the go_modules group across 1 directory with 6 updates

pbs-common/terraform-aws-sns-topic-module #31

1.7.1 → 1.7.9 Patch PR

Open 3 months ago

chore(deps): bump the go_modules group with 3 updates

quicksilver-zone/quicksilver #1968

1.7.8 → 1.7.9 Patch PR

Closed 3 months ago 2 comments

Bump the go_modules group across 1 directory with 6 updates

pbs-common/terraform-aws-elasticache-parameter-group-module #46

1.7.1 → 1.7.9 Patch PR

Open 3 months ago

Bump the go_modules group across 1 directory with 6 updates

pbs-common/terraform-aws-bucket-notification-module #49

1.7.1 → 1.7.9 Patch PR

Open 3 months ago

Bump the go_modules group across 1 directory with 6 updates

pbs-common/terraform-aws-virtual-service-module #45

1.7.1 → 1.7.9 Patch PR

Open 3 months ago

Bump the go_modules group across 1 directory with 6 updates

pbs-common/terraform-aws-s3-module #76

1.7.1 → 1.7.9 Patch PR

Closed 3 months ago 1 comment

Bump the go_modules group across 1 directory with 6 updates

pbs-common/terraform-aws-resource-group-module #31

1.7.1 → 1.7.9 Patch PR

Open 3 months ago

Bump the go_modules group across 1 directory with 6 updates

pbs-common/terraform-aws-sns-topic-subscription-module #31

1.7.1 → 1.7.9 Patch PR

Open 3 months ago

Bump the go_modules group across 1 directory with 6 updates

pbs-common/terraform-aws-cloudfront-module #57

1.7.1 → 1.7.9 Patch PR

Open 3 months ago

Bump the go_modules group across 1 directory with 6 updates

pbs-common/terraform-aws-cloudfront-function-module #45

1.7.1 → 1.7.9 Patch PR

Open 3 months ago

Bump the go_modules group across 1 directory with 6 updates

pbs-common/terraform-aws-virtual-router-module #46

1.7.1 → 1.7.9 Patch PR

Open 3 months ago

Bump the go_modules group across 1 directory with 6 updates

pbs-common/terraform-aws-ecs-task-definition-module #65

1.7.1 → 1.7.9 Patch PR

Closed 3 months ago 1 comment

Bump the go_modules group across 1 directory with 2 updates

pulumi/pulumi-gcp #3357

1.7.5 → 1.7.9 Patch PR

Merged 3 months ago 1 comment

Package Details

Name:	`github.com/hashicorp/go-getter`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/hashicorp/go-getter`
JSON API:	View JSON

Security Advisories

9

Active advisories

CRITICAL 2

HIGH 5

MODERATE 2

View All golang Advisories

Package Information

Description:

getter is a package for downloading files or directories from a variety of protocols. getter is unique in its ability to download both directories and files. It also detects certain source strings to be protocol-specific URLs. For example, "github.com/hashicorp/go-getter" would turn into a Git URL and use the Git protocol. Protocols and detectors are extensible. To get started, see Client.

Repository:	https://github.com/hashicorp/go-getter
Homepage:	https://github.com/hashicorp/go-getter
Latest Release:	`v1.7.8` 11 months ago
Dependent Repos:	6,872
Dependent Packages:	3,705
Ranking:	Top 0.0949% by dependent repos Top 0.0592% by dependent pkgs

PR Status

Open 694 (59.7%)

Merged 109 (9.4%)

Closed 343 (29.5%)

PR Types

Minor 400 (34.4%)

Patch 746 (64.1%)