`github.com/hashicorp/go-getter`

Ecosystem:
go

Package URL:
pkg:golang/github.com/hashicorp/go-getter

Total PRs:
1,168 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
561 repositories

Unique Repos (30 days):
19 repositories

Security Advisories

Data Amplification in HashiCorp go-getter

GHSA-jpxj-2jvg-6jv9 CVE-2023-0475 MODERATE published almost 3 years ago • updated 3 days ago

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0.

HashiCorp go-getter command injection

GHSA-x24g-9w7v-vprh CVE-2022-26945 CRITICAL published over 3 years ago • updated 17 days ago

HashiCorp go-getter before 2.0.2 allows Command Injection.

HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion

GHSA-28r2-q6m8-9hpx CVE-2022-30323 HIGH published over 3 years ago • updated 17 days ago

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Asymmetric resource exhaustion could occur when go-getter processed malicious ...

HashiCorp go-getter unsafe downloads could lead to arbitrary host access

GHSA-cjr4-fv6c-f3mv CVE-2022-30322 HIGH published over 3 years ago • updated 17 days ago

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Arbitrary host access was possible via go-getter path traversal, symlink proce...

Insertion of Sensitive Information into Log File in Hashicorp go-getter

GHSA-27rq-4943-qcwp CVE-2022-29810 MODERATE published over 3 years ago • updated 16 days ago

The Hashicorp go-getter library before 1.5.11 could write SSH credentials into its logfile, exposing sensitive credentials to local users able to r...

View all 9 advisories

Recent PRs

RSS Feed

build(deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 in /tools/cosmovisor in the go_modules group

cosmos/cosmos-sdk #25219

1.7.8 → 1.7.9 Patch PR

Closed 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

zarf-dev/zarf #4110

1.7.8 → 1.7.9 Patch PR

Open 4 months ago 5 comments

Bump github.com/hashicorp/go-getter from 1.4.2-0.20200106182914-9813cbd4eb02 to 1.7.9

NikoMix/terraform-provider-azurecaf #1

1.4.2-0.20200106182914-9813cbd4eb02 → 1.7.9 Minor PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

GoogleCloudPlatform/terraform-google-cloud-ids #63

1.7.6 → 1.7.9 Patch PR

Open 4 months ago 7 comments

build(deps): Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

SigNoz/terraform-provider-signoz #54

1.7.5 → 1.7.9 Patch PR

Open 4 months ago 1 comment

Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 in /provider

rhysmdnz/pulumi-containerregistry #315

1.7.8 → 1.7.9 Patch PR

Merged 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in the go_modules group

omni-network/omni #4353

1.7.5 → 1.7.9 Patch PR

Merged 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.6.2 to 1.7.9

bridgecrewio/yor #643

1.6.2 → 1.7.9 Minor PR

Open 4 months ago

build(deps): Bump the go_modules group across 9 directories with 4 updates

WalkerEnterprise/cosmos-sdk #169

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.2 to 1.7.9 in /tools/cosmovisor

allinbits/cosmos-sdk #1965

1.7.2 → 1.7.9 Patch PR

Open 4 months ago 1 comment

Bump the go_modules group across 14 directories with 5 updates

mian4671/Faisal #444

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /test

wyracocha/azure-naming-convention #4

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

jenkins-x-plugins/jx-updatebot #133

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/steampipe-plugin-linkedin #55

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

persistenceOne/persistence-sdk #435

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9

guravvaishnavi02/k9s #11

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

ojo-network/ojo #605

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

GoogleCloudPlatform/terraform-google-netapp-volumes #57

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

Bump the go_modules group across 1 directory with 5 updates

launchbynttdata/tf-azurerm-module_primitive-api_management_diagnostic #2

1.7.1 → 1.7.9 Patch PR

Open 4 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /simapp

alessio/cosmos-sdk #151

1.7.6 → 1.7.9 Patch PR

Open 4 months ago 2 comments

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /test/src

cloudposse/terraform-aws-documentdb-cluster #135

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.6.2 to 1.7.9 in /test

gpsa/terraform-aws-waf-webaclv2 #4

1.6.2 → 1.7.9 Minor PR

Open 4 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.9 in /tools/cosmovisor

ingenuity-build/cosmos-sdk #2276

1.7.1 → 1.7.9 Patch PR

Closed 4 months ago 2 comments

build(deps): Bump github.com/hashicorp/go-getter from 1.7.0 to 1.7.9 in /tools/cosmovisor

samkenxstream/SamKenX_cosmos-sdk #2436

1.7.0 → 1.7.9 Patch PR

Closed 4 months ago 2 comments

chore: Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

chanzuckerberg/fogg #1134

1.7.8 → 1.7.9 Patch PR

Merged 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

aquasecurity/trivy #9361

1.7.8 → 1.7.9 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the go_modules group across 1 directory with 6 updates

jadenblack/coder #2

1.7.8 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 in the go_modules group

paketo-buildpacks/jam #418

1.7.8 → 1.7.9 Patch PR

Merged 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 in /tools

conforma/cli #2695

1.7.8 → 1.7.9 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the go_modules group across 1 directory with 3 updates

ScorpionBytes/snyk-cli #39

1.7.5 → 1.7.9 Patch PR

Closed 4 months ago 2 comments

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

gruntwork-io/go-commons #105

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

bot: Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

sourcenetwork/defradb #3962

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

scott-the-programmer/terraform-provider-minikube #207

1.7.8 → 1.7.9 Patch PR

Merged 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test/integration

terraform-google-modules/terraform-google-scheduled-function #302

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

bandprotocol/chain #758

1.7.5 → 1.7.9 Patch PR

Closed 4 months ago 2 comments

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /cliv2

Aysher-Intelligence-Agency/cli1 #2

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.9 in /tests

ingenuity-build/cosmos-sdk #2275

1.7.1 → 1.7.9 Patch PR

Closed 4 months ago 2 comments

build(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in the go_modules group across 1 directory

Mr-Ao-Dragon/MCSL-Sync-Golang-SDK #7

1.7.6 → 1.7.9 Patch PR

Open 4 months ago 1 comment

build(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

guravvaishnavi02/terraform #15

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

build(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

kartverket/skiperator #728

1.7.8 → 1.7.9 Patch PR

Open 4 months ago 2 comments

build(deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 in /simapp in the go_modules group

cosmos/cosmos-sdk #25218

1.7.8 → 1.7.9 Patch PR

Closed 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9 in /test

terraform-google-modules/terraform-google-cloud-operations #136

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/steampipe-plugin-chaosdynamic #62

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

provenance-io/provenance #2426

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

NibiruChain/nibiru #2364

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9 in /test/integration

GoogleCloudPlatform/terraform-google-three-tier-web-app #236

1.7.5 → 1.7.9 Patch PR

Open 4 months ago 1 comment

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

turbot/steampipe-plugin-trivy #86

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

chore(deps): Bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.9

celestiaorg/celestia-node #4493

1.7.6 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

planq-network/planq #294

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.9

francois2metz/steampipe-plugin-ripeatlas #48

1.7.5 → 1.7.9 Patch PR

Open 4 months ago

Package Details

Name:	`github.com/hashicorp/go-getter`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/hashicorp/go-getter`
JSON API:	View JSON

Security Advisories

9

Active advisories

CRITICAL 2

HIGH 5

MODERATE 2

View All golang Advisories

Package Information

Description:

getter is a package for downloading files or directories from a variety of protocols. getter is unique in its ability to download both directories and files. It also detects certain source strings to be protocol-specific URLs. For example, "github.com/hashicorp/go-getter" would turn into a Git URL and use the Git protocol. Protocols and detectors are extensible. To get started, see Client.

Repository:	https://github.com/hashicorp/go-getter
Homepage:	https://github.com/hashicorp/go-getter
Latest Release:	`v1.7.8` 11 months ago
Dependent Repos:	6,872
Dependent Packages:	3,705
Ranking:	Top 0.0949% by dependent repos Top 0.0592% by dependent pkgs

PR Status

Open 696 (59.6%)

Merged 109 (9.3%)

Closed 346 (29.6%)

PR Types

Minor 403 (34.5%)

Patch 748 (64.0%)