`github.com/hashicorp/go-getter`

Ecosystem:
go

Package URL:
pkg:golang/github.com/hashicorp/go-getter

Total PRs:
1,168 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
561 repositories

Unique Repos (30 days):
19 repositories

Security Advisories

Data Amplification in HashiCorp go-getter

GHSA-jpxj-2jvg-6jv9 CVE-2023-0475 MODERATE published almost 3 years ago • updated 3 days ago

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0.

HashiCorp go-getter command injection

GHSA-x24g-9w7v-vprh CVE-2022-26945 CRITICAL published over 3 years ago • updated 16 days ago

HashiCorp go-getter before 2.0.2 allows Command Injection.

HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion

GHSA-28r2-q6m8-9hpx CVE-2022-30323 HIGH published over 3 years ago • updated 16 days ago

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Asymmetric resource exhaustion could occur when go-getter processed malicious ...

HashiCorp go-getter unsafe downloads could lead to arbitrary host access

GHSA-cjr4-fv6c-f3mv CVE-2022-30322 HIGH published over 3 years ago • updated 16 days ago

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Arbitrary host access was possible via go-getter path traversal, symlink proce...

Insertion of Sensitive Information into Log File in Hashicorp go-getter

GHSA-27rq-4943-qcwp CVE-2022-29810 MODERATE published over 3 years ago • updated 16 days ago

The Hashicorp go-getter library before 1.5.11 could write SSH credentials into its logfile, exposing sensitive credentials to local users able to r...

View all 9 advisories

Recent PRs

RSS Feed

Bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9

Mirantis/launchpad #591

1.7.6 → 1.7.9 Patch PR

Closed 4 months ago 1 comment

chore(deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

sweetgreen/terragrunt-ls #2

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

chore: bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 in the go_modules group across 1 directory

Klomgor/coder #264

1.7.8 → 1.7.9 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

rollchains/spawn #322

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

Scalingo/terraform-provider-encrypted #162

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /x/ibc-hooks

osmosis-labs/osmosis #9487

1.7.5 → 1.7.9 Patch PR

Open 4 months ago 3 comments

Bump the go_modules group in /x/upgrade with 4 updates

mian4671/Faisal #447

1.7.8 → 1.7.9 Patch PR

Open 4 months ago 2 comments

chore: bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /infra/test/integration

GoogleCloudPlatform/terraform-ml-image-annotation-gcf #308

1.7.5 → 1.7.9 Patch PR

Open 4 months ago 1 comment

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/steampipe-plugin-oci #668

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

chanzuckerberg/cztack #742

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

jenkins-x-plugins/jx-promote #448

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9

pingidentity/terraform-provider-identitycloud #89

1.7.6 → 1.7.9 Patch PR

Merged 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.2 to 1.7.9 in /test/integration

GoogleCloudPlatform/solutionbuilder-terraform-google-three-tier-web-app #33

1.7.2 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-bastion-host #233

1.7.6 → 1.7.9 Patch PR

Closed 4 months ago 4 comments

Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

cboneti/cluster-toolkit #67

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

build(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

SkypLabs-Ltd/opentofu #6

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

GoogleCloudPlatform/terraform-google-anthos-vm #65

1.7.6 → 1.7.9 Patch PR

Open 4 months ago 1 comment

[Dependabot](deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

turbot/steampipe-postgres-fdw #587

1.7.8 → 1.7.9 Patch PR

Open 4 months ago 2 comments

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-composer #173

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

francois2metz/steampipe-plugin-gitguardian #54

1.7.5 → 1.7.9 Patch PR

Merged 4 months ago

Bump github.com/hashicorp/go-getter from 1.4.0 to 1.7.9

trvon/terraform-provider-openvswitch #18

1.4.0 → 1.7.9 Minor PR

Closed 4 months ago 1 comment

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

neticdk/go-common #187

1.7.8 → 1.7.9 Patch PR

Open 4 months ago 2 comments

build(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /provider

pulumiverse/pulumi-time #73

1.7.5 → 1.7.9 Patch PR

Closed 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

hashicorp/terraform #37471

1.7.8 → 1.7.9 Patch PR

Open 4 months ago 5 comments

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/tailpipe-plugin-chaos #13

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

⬆️ test: Bump the go_modules group in /test with 4 updates

bendoerr-terraform-modules/terraform-module-repo-template #37

1.7.6 → 1.7.9 Patch PR

Open 4 months ago 3 comments

Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

paketo-buildpacks/nginx #969

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

strangelove-ventures/connect #18

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

build(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /test

tidalmigrations/terragrunt-infrastructure-catalog-example #1

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/steampipe-plugin-openapi #84

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

GoogleCloudPlatform/terraform-google-out-of-band-security #102

1.7.6 → 1.7.9 Patch PR

Open 4 months ago 1 comment

build(deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 in /simapp

KOSASIH/cosmos-sdk #1094

1.7.8 → 1.7.9 Patch PR

Open 4 months ago 1 comment

build(deps): bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.9

haqq-network/haqq #378

1.7.1 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/tailpipe-plugin-sdk #270

1.7.5 → 1.7.9 Patch PR

Open 4 months ago 3 comments

provider(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /provider in the go_modules group

pulumiverse/pulumi-dynatrace #222

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

pingidentity/terraform-provider-pingdirectory #453

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/tailpipe-plugin-core #46

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

build(deps): bump the go_modules group with 2 updates

PundiAI/fx-core #1158

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/steampipe-plugin-azuread #275

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.9 in /interchaintest

persistenceOne/pstake-native #986

1.7.1 → 1.7.9 Patch PR

Open 4 months ago 2 comments

build(deps): Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /tests/interchaintest

classic-terra/core #586

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/steampipe-plugin-github #511

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

nagelflorian/terraform-aws-s3-review-apps #62

1.7.5 → 1.7.9 Patch PR

Merged 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.9 in /test/integration

GoogleCloudPlatform/terraform-google-secured-data-warehouse #421

1.7.1 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /provider

formalco/pulumi-formal #21

1.7.5 → 1.7.9 Patch PR

Merged 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-address #161

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.2 to 1.7.9 in /tests

allinbits/cosmos-sdk #1966

1.7.2 → 1.7.9 Patch PR

Open 4 months ago 2 comments

chore(deps): bump github.com/hashicorp/go-getter from 1.6.1 to 1.7.9

nakominosu/gaia #338

1.6.1 → 1.7.9 Minor PR

Open 4 months ago 1 comment

build(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 in /.ci/tools

hashicorp/terraform-provider-aws #43968

1.7.8 → 1.7.9 Patch PR

Merged 4 months ago 1 comment

build(deps): Bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /tests in the go_modules group

WalkerEnterprise/cosmos-sdk #171

1.7.6 → 1.7.9 Patch PR

Open 4 months ago 1 comment

Package Details

Name:	`github.com/hashicorp/go-getter`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/hashicorp/go-getter`
JSON API:	View JSON

Security Advisories

9

Active advisories

CRITICAL 2

HIGH 5

MODERATE 2

View All golang Advisories

Package Information

Description:

getter is a package for downloading files or directories from a variety of protocols. getter is unique in its ability to download both directories and files. It also detects certain source strings to be protocol-specific URLs. For example, "github.com/hashicorp/go-getter" would turn into a Git URL and use the Git protocol. Protocols and detectors are extensible. To get started, see Client.

Repository:	https://github.com/hashicorp/go-getter
Homepage:	https://github.com/hashicorp/go-getter
Latest Release:	`v1.7.8` 11 months ago
Dependent Repos:	6,872
Dependent Packages:	3,705
Ranking:	Top 0.0949% by dependent repos Top 0.0592% by dependent pkgs

PR Status

Open 696 (59.6%)

Merged 109 (9.3%)

Closed 346 (29.6%)

PR Types

Minor 403 (34.5%)

Patch 748 (64.0%)