`github.com/hashicorp/go-getter`

Ecosystem:
go

Package URL:
pkg:golang/github.com/hashicorp/go-getter

Total PRs:
1,166 Dependabot PRs

Latest PR:
2 days ago

Unique Repositories:
561 repositories

Unique Repos (30 days):
21 repositories

Security Advisories

Data Amplification in HashiCorp go-getter

GHSA-jpxj-2jvg-6jv9 CVE-2023-0475 MODERATE published almost 3 years ago • updated 2 days ago

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0.

HashiCorp go-getter command injection

GHSA-x24g-9w7v-vprh CVE-2022-26945 CRITICAL published over 3 years ago • updated 16 days ago

HashiCorp go-getter before 2.0.2 allows Command Injection.

HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion

GHSA-28r2-q6m8-9hpx CVE-2022-30323 HIGH published over 3 years ago • updated 16 days ago

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Asymmetric resource exhaustion could occur when go-getter processed malicious ...

HashiCorp go-getter unsafe downloads could lead to arbitrary host access

GHSA-cjr4-fv6c-f3mv CVE-2022-30322 HIGH published over 3 years ago • updated 16 days ago

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Arbitrary host access was possible via go-getter path traversal, symlink proce...

Insertion of Sensitive Information into Log File in Hashicorp go-getter

GHSA-27rq-4943-qcwp CVE-2022-29810 MODERATE published over 3 years ago • updated 15 days ago

The Hashicorp go-getter library before 1.5.11 could write SSH credentials into its logfile, exposing sensitive credentials to local users able to r...

View all 9 advisories

Recent PRs

RSS Feed

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

xycloops123/trivy #356

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.6.2 to 1.7.9

riddopic/tfsec #20

1.6.2 → 1.7.9 Minor PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

aiflash/trivy #318

1.7.8 → 1.7.9 Patch PR

Closed 4 months ago 2 comments

Bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /azure

vulcan-lab/wrongsecrets #7

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

build(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

unwired/helmfile #5

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

Bump the go_modules group across 10 directories with 7 updates

Jackblanket847/terraform #2

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

rundeck/terraform-provider-rundeck #192

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.6.2 to 1.7.9 in /test/src

cloudposse/terraform-aws-s3-log-storage #129

1.6.2 → 1.7.9 Minor PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

francois2metz/steampipe-plugin-phrase #68

1.7.5 → 1.7.9 Patch PR

Merged 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /aws-observability-terraform

SumoLogic/sumologic-solution-templates #259

1.7.5 → 1.7.9 Patch PR

Closed 4 months ago 2 comments

build(deps): bump github.com/hashicorp/go-getter from 1.3.0 to 1.7.9

D0LLi/terraform-provider-gitops #8

1.3.0 → 1.7.9 Minor PR

Open 4 months ago 17 comments

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /test

locus313/terraform-module-aws-route53 #24

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 in /tests

KOSASIH/cosmos-sdk #1095

1.7.8 → 1.7.9 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the go_modules group across 2 directories with 2 updates

quicksilver-zone/quicksilver #1960

1.7.8 → 1.7.9 Patch PR

Open 4 months ago 2 comments

build(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

Checkmarx/kics #7666

1.7.8 → 1.7.9 Patch PR

Closed 4 months ago 1 comment

Bump github.com/hashicorp/go-getter from 1.6.1 to 1.7.9

riddopic/terratest #39

1.6.1 → 1.7.9 Minor PR

Open 4 months ago

chore(deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

cosmos/gaia #3850

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /test

runreveal/terraform-aws-alternat #6

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/steampipe-plugin-bluesky #15

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

provider(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /provider

pierskarsenbarg/pulumi-sdm #362

1.7.5 → 1.7.9 Patch PR

Merged 4 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.0 to 1.7.9 in /tests

samkenxstream/SamKenX_cosmos-sdk #2437

1.7.0 → 1.7.9 Patch PR

Closed 4 months ago 2 comments

build(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

mitosis-org/chain #86

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 in /.ci/tools

Yagro-Ltd/terraform-provider-aws #1

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

getduckbill/mongobetween #14

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/tailpipe-plugin-azure #93

1.7.5 → 1.7.9 Patch PR

Open 4 months ago 1 comment

build(deps): Bump the go_modules group across 39 directories with 5 updates

burnt-labs/cosmos-sdk #26

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test

c4c-azure/c4c-terraform-azurerm-virtual-machine #5

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.4 to 1.7.9 in /e2e

circlefin/noble-fiattokenfactory #42

1.7.4 → 1.7.9 Patch PR

Merged 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-network #628

1.7.6 → 1.7.9 Patch PR

Open 4 months ago 1 comment

build(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

okteto/okteto #4754

1.7.5 → 1.7.9 Patch PR

Open 4 months ago 1 comment

Bump github.com/hashicorp/go-getter from 1.7.4 to 1.7.9

khulnasoft-lab/tfsecurity #4

1.7.4 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /test/integration

opdev/terraform-genai-doc-summarization #9

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

crypto-org-chain/cronos #1852

1.7.8 → 1.7.9 Patch PR

Open 4 months ago 1 comment

Bump github.com/hashicorp/go-getter from 1.6.1 to 1.7.9 in /test

nkingsly1/terraform-2 #1

1.6.1 → 1.7.9 Minor PR

Open 4 months ago

[dep][go](deps): Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/powerpipe #890

1.7.5 → 1.7.9 Patch PR

Closed 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

codacy/codacy-trivy #180

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

AikidoSec/steampipe-plugin-gcp #5

1.7.5 → 1.7.9 Patch PR

Open 4 months ago 1 comment

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

GoogleCloudPlatform/terraform-google-cloud-run #389

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.4 to 1.7.9 in /tests

Switcheo/cosmos-sdk #873

1.7.4 → 1.7.9 Patch PR

Open 4 months ago 1 comment

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-lb-http #531

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): Bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /nodebuilder/tests/tastora

celestiaorg/celestia-node #4494

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.9 in /test/src

Cibahealth/terraform-aws-step-functions #2

1.7.1 → 1.7.9 Patch PR

Open 4 months ago 1 comment

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

INHEALY/terraform-docs-samples #5

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /test/integration

GoogleCloudPlatform/terraform-google-waap #116

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.9 in /cli

GoogleCloudPlatform/gke-poc-toolkit #185

1.7.1 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.0 to 1.7.9 in /test/integration

GoogleCloudPlatform/terraform-google-dbt-composer-blueprint #32

1.7.0 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-github-actions-runners #221

1.7.6 → 1.7.9 Patch PR

Closed 4 months ago 3 comments

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

francois2metz/steampipe-plugin-ovh #64

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9

Mirantis/launchpad #591

1.7.6 → 1.7.9 Patch PR

Closed 4 months ago 1 comment

chore(deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

sweetgreen/terragrunt-ls #2

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

Package Details

Name:	`github.com/hashicorp/go-getter`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/hashicorp/go-getter`
JSON API:	View JSON

Security Advisories

9

Active advisories

CRITICAL 2

HIGH 5

MODERATE 2

View All golang Advisories

Package Information

Description:

getter is a package for downloading files or directories from a variety of protocols. getter is unique in its ability to download both directories and files. It also detects certain source strings to be protocol-specific URLs. For example, "github.com/hashicorp/go-getter" would turn into a Git URL and use the Git protocol. Protocols and detectors are extensible. To get started, see Client.

Repository:	https://github.com/hashicorp/go-getter
Homepage:	https://github.com/hashicorp/go-getter
Latest Release:	`v1.7.8` 11 months ago
Dependent Repos:	6,872
Dependent Packages:	3,705
Ranking:	Top 0.0949% by dependent repos Top 0.0592% by dependent pkgs

PR Status

Open 696 (59.7%)

Merged 109 (9.3%)

Closed 344 (29.5%)

PR Types

Minor 401 (34.4%)

Patch 748 (64.2%)