`github.com/hashicorp/go-getter`

Ecosystem:
go

Package URL:
pkg:golang/github.com/hashicorp/go-getter

Total PRs:
1,164 Dependabot PRs

Latest PR:
11 days ago

Unique Repositories:
559 repositories

Unique Repos (30 days):
22 repositories

Security Advisories

Data Amplification in HashiCorp go-getter

GHSA-jpxj-2jvg-6jv9 CVE-2023-0475 MODERATE published almost 3 years ago • updated 11 days ago

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0.

HashiCorp go-getter command injection

GHSA-x24g-9w7v-vprh CVE-2022-26945 CRITICAL published over 3 years ago • updated 13 days ago

HashiCorp go-getter before 2.0.2 allows Command Injection.

HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion

GHSA-28r2-q6m8-9hpx CVE-2022-30323 HIGH published over 3 years ago • updated 13 days ago

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Asymmetric resource exhaustion could occur when go-getter processed malicious ...

HashiCorp go-getter unsafe downloads could lead to arbitrary host access

GHSA-cjr4-fv6c-f3mv CVE-2022-30322 HIGH published over 3 years ago • updated 13 days ago

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Arbitrary host access was possible via go-getter path traversal, symlink proce...

Insertion of Sensitive Information into Log File in Hashicorp go-getter

GHSA-27rq-4943-qcwp CVE-2022-29810 MODERATE published over 3 years ago • updated 13 days ago

The Hashicorp go-getter library before 1.5.11 could write SSH credentials into its logfile, exposing sensitive credentials to local users able to r...

View all 9 advisories

Recent PRs

RSS Feed

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-lb #128

1.7.6 → 1.7.9 Patch PR

Open 3 months ago 1 comment

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-bigquery #413

1.7.6 → 1.7.9 Patch PR

Open 3 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-pubsub #267

1.7.6 → 1.7.9 Patch PR

Open 3 months ago 2 comments

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-kms #178

1.7.6 → 1.7.9 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-log-export #253

1.7.6 → 1.7.9 Patch PR

Open 3 months ago 1 comment

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-cloud-dns #122

1.7.6 → 1.7.9 Patch PR

Open 3 months ago 8 comments

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-vpn #193

1.7.6 → 1.7.9 Patch PR

Open 3 months ago 4 comments

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-sql-db #766

1.7.5 → 1.7.9 Patch PR

Open 3 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-vm #525

1.7.6 → 1.7.9 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /test/integration

GoogleCloudPlatform/terraform-google-cloud-armor #165

1.7.5 → 1.7.9 Patch PR

Open 3 months ago 1 comment

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

GoogleCloudPlatform/terraform-google-artifact-registry #65

1.7.6 → 1.7.9 Patch PR

Open 3 months ago 4 comments

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

GoogleCloudPlatform/terraform-google-alloy-db #167

1.7.6 → 1.7.9 Patch PR

Open 3 months ago 1 comment

build(deps): bump github.com/hashicorp/go-getter from 1.7.0 to 1.7.9 in /infra/test/integration

GoogleCloudPlatform/terraform-pubsub-integration-golang #48

1.7.0 → 1.7.9 Patch PR

Open 3 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /test/integration

GoogleCloudPlatform/terraform-google-cloud-functions #184

1.7.5 → 1.7.9 Patch PR

Open 3 months ago 1 comment

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /infra/test/integration

GoogleCloudPlatform/terraform-ecommerce-microservices-on-gke #402

1.7.5 → 1.7.9 Patch PR

Open 3 months ago 1 comment

build(deps): bump the go-modules group across 1 directory with 41 updates

cyrillesondag/paketo-buildpacks-pnpm #21

1.7.8 → 1.7.9 Patch PR

Open 3 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

AikidoSec/steampipe-plugin-azure #13

1.7.5 → 1.7.9 Patch PR

Open 3 months ago

Bump the go-modules group across 1 directory with 17 updates

paketo-buildpacks/yarn-install #997

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

Bump the go-modules group across 1 directory with 17 updates

paketo-buildpacks/yarn #847

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /e2e

noble-assets/noble #580

1.7.5 → 1.7.9 Patch PR

Open 4 months ago 1 comment

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

l-teles/steampipe-plugin-detectify #23

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump the go-modules group across 1 directory with 17 updates

paketo-buildpacks/go-dist #1083

1.7.8 → 1.7.9 Patch PR

Closed 4 months ago 1 comment

build(deps): bump the go_modules group with 2 updates

warden-protocol/wardenprotocol #1669

1.7.8 → 1.7.9 Patch PR

Open 4 months ago 1 comment

build(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /tests/slinky in the go_modules group across 1 directory

warden-protocol/wardenprotocol #1668

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump the go_modules group with 2 updates

replicatedhq/kURL #5749

1.7.8 → 1.7.9 Patch PR

Merged 4 months ago

build(deps): bump the go-modules group across 1 directory with 39 updates

cyrillesondag/paketo-buildpacks-pnpm #20

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

osmosis-labs/osmosis #9490

1.7.5 → 1.7.9 Patch PR

Closed 4 months ago 1 comment

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

gruntwork-io/kubergrunt #261

1.7.5 → 1.7.9 Patch PR

Merged 4 months ago 2 comments

Bump the go-modules group across 1 directory with 16 updates

paketo-buildpacks/yarn-install #996

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.6.1 to 1.7.9 in /test/src

cardlay/terraform-aws-transfer-sftp #1

1.6.1 → 1.7.9 Minor PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

stefan-kiss/getbin #4

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 in /httphandler

kubescape/kubescape #1864

1.7.8 → 1.7.9 Patch PR

Merged 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9

kubescape/kubevuln #301

1.7.6 → 1.7.9 Patch PR

Merged 4 months ago 1 comment

Bump the go-modules group across 1 directory with 16 updates

paketo-buildpacks/go-dist #1082

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

Bump the go-modules group across 1 directory with 15 updates

paketo-buildpacks/go-mod-vendor #906

1.7.8 → 1.7.9 Patch PR

Closed 4 months ago 2 comments

build(deps): bump the go-modules group across 1 directory with 38 updates

cyrillesondag/paketo-buildpacks-pnpm #19

1.7.8 → 1.7.9 Patch PR

Closed 4 months ago 1 comment

chore: bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /cli

chanzuckerberg/happy #4153

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

1xcode/k9s #4

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/steampipe-plugin-aws #2620

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

whereby/terraform-linters #29

1.7.8 → 1.7.9 Patch PR

Merged 4 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 in /x/upgrade

KOSASIH/cosmos-sdk #1096

1.7.8 → 1.7.9 Patch PR

Open 4 months ago 1 comment

Bump the go_modules group in /tests with 3 updates

mian4671/Faisal-maqsood #488

1.7.8 → 1.7.9 Patch PR

Open 4 months ago 3 comments

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

GoogleCloudPlatform/terraform-google-dataplex-auto-data-quality #43

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

pactflow/terraform-provider-pact #69

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump the go_modules group across 1 directory with 3 updates

offsoc/snyk-driftctl #4

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/steampipe-plugin-googlesheets #174

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

build(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

okp4/nemeton-leaderboard #293

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.7 to 1.7.9 in /tools/cosmovisor

Pleyades17/cosmos-sdk #2

1.7.7 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

CVEDB/vuln-list-hf #5

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.6.2 to 1.7.9

riddopic/tfsec #20

1.6.2 → 1.7.9 Minor PR

Open 4 months ago

Package Details

Name:	`github.com/hashicorp/go-getter`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/hashicorp/go-getter`
JSON API:	View JSON

Security Advisories

9

Active advisories

CRITICAL 2

HIGH 5

MODERATE 2

View All golang Advisories

Package Information

Description:

getter is a package for downloading files or directories from a variety of protocols. getter is unique in its ability to download both directories and files. It also detects certain source strings to be protocol-specific URLs. For example, "github.com/hashicorp/go-getter" would turn into a Git URL and use the Git protocol. Protocols and detectors are extensible. To get started, see Client.

Repository:	https://github.com/hashicorp/go-getter
Homepage:	https://github.com/hashicorp/go-getter
Latest Release:	`v1.7.8` 11 months ago
Dependent Repos:	6,872
Dependent Packages:	3,705
Ranking:	Top 0.0949% by dependent repos Top 0.0592% by dependent pkgs

PR Status

Open 695 (59.7%)

Merged 109 (9.4%)

Closed 343 (29.5%)

PR Types

Minor 401 (34.5%)

Patch 746 (64.1%)