`github.com/hashicorp/go-getter`

Ecosystem:
go

Package URL:
pkg:golang/github.com/hashicorp/go-getter

Total PRs:
1,161 Dependabot PRs

Latest PR:
7 days ago

Unique Repositories:
559 repositories

Unique Repos (30 days):
30 repositories

Security Advisories

HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion

GHSA-28r2-q6m8-9hpx CVE-2022-30323 HIGH published over 3 years ago • updated 9 days ago

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Asymmetric resource exhaustion could occur when go-getter processed malicious ...

HashiCorp go-getter unsafe downloads could lead to arbitrary host access

GHSA-cjr4-fv6c-f3mv CVE-2022-30322 HIGH published over 3 years ago • updated 9 days ago

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Arbitrary host access was possible via go-getter path traversal, symlink proce...

View all 9 advisories

Recent PRs

RSS Feed

build(deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.8.1 in /x/upgrade

KOSASIH/cosmos-sdk #1158

1.7.8 → 1.8.1 Minor PR

Closed 2 months ago 2 comments

build(deps): Bump github.com/hashicorp/go-getter from 1.7.3 to 1.8.1 in /x/upgrade

bukishola/cosmos-sdk #1191

1.7.3 → 1.8.1 Minor PR

Closed 2 months ago 2 comments

build(deps): Bump github.com/hashicorp/go-getter from 1.7.3 to 1.8.1 in /x/upgrade

rootulp/cosmos-sdk #1612

1.7.3 → 1.8.1 Minor PR

Open 2 months ago 1 comment

build(deps): Bump github.com/hashicorp/go-getter from 1.7.4 to 1.8.1 in /x/upgrade

Switcheo/cosmos-sdk #908

1.7.4 → 1.8.1 Minor PR

Open 2 months ago 2 comments

build(deps): Bump github.com/hashicorp/go-getter from 1.7.3 to 1.8.1 in /x/upgrade

coderasha/SEDA-Blockchain-Cosmos-SDK #1447

1.7.3 → 1.8.1 Minor PR

Closed 2 months ago 2 comments

Bump github.com/hashicorp/go-getter from 1.7.3 to 1.8.1 in /x/upgrade

sovereigntlabs/Sovereign-T-Protocol-sdk #1298

1.7.3 → 1.8.1 Minor PR

Closed 2 months ago 2 comments

build(deps): Bump github.com/hashicorp/go-getter from 1.7.3 to 1.8.1 in /x/upgrade

joshklop/monomer-cosmos-sdk #1415

1.7.3 → 1.8.1 Minor PR

Closed 2 months ago 2 comments

Bump github.com/hashicorp/go-getter from 1.7.1 to 1.8.1 in /x/upgrade

BiPhan4/cosmos-sdk-0.50.1-extended #1620

1.7.1 → 1.8.1 Minor PR

Closed 2 months ago 2 comments

Bump github.com/hashicorp/go-getter from 1.7.2 to 1.8.1 in /x/upgrade

puneetjindal3/cosmos-kyc #1562

1.7.2 → 1.8.1 Minor PR

Open 2 months ago 2 comments

build(deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.8.1 in /x/upgrade

bwhour/cosdk #2688

1.7.8 → 1.8.1 Minor PR

Open 2 months ago 1 comment

chore(deps): bump the common group across 1 directory with 41 updates

riddopic/trivy #164

1.7.8 → 1.8.1 Minor PR

Open 2 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.2 to 1.8.1 in /x/upgrade

allinbits/cosmos-sdk #2069

1.7.2 → 1.8.1 Minor PR

Open 2 months ago 1 comment

build(deps): Bump github.com/hashicorp/go-getter from 1.7.1 to 1.8.1 in /x/upgrade

ingenuity-build/cosmos-sdk #2379

1.7.1 → 1.8.1 Minor PR

Closed 2 months ago 2 comments

build(deps): Bump github.com/hashicorp/go-getter from 1.7.4 to 1.8.1 in /x/upgrade

notional-labs/cosmos-sdk #2955

1.7.4 → 1.8.1 Minor PR

Open 2 months ago 1 comment

build(deps): bump the go-dependencies group across 1 directory with 4 updates

gruntwork-io/terragrunt #4861

1.8.0 → 1.8.1 Patch PR

Open 2 months ago 3 comments

chore(deps): bump the common group across 1 directory with 30 updates

sn0rlaxlife/trivy #81

1.7.8 → 1.8.1 Minor PR

Open 2 months ago

Bump github.com/hashicorp/go-getter from 1.8.0 to 1.8.1

terraform-linters/tflint-ruleset-terraform #287

1.8.0 → 1.8.1 Patch PR

Merged 2 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.9 to 1.8.1

hashicorp/nomad #26816

1.7.9 → 1.8.1 Minor PR

Open 2 months ago

Bump github.com/hashicorp/go-getter from 1.7.9 to 1.8.1

cloudposse/atmos #1486

1.7.9 → 1.8.1 Minor PR

Open 2 months ago 4 comments

Bump github.com/hashicorp/go-getter from 1.7.5 to 1.8.1

0xStellaHsu/terraform-provider-cloudfoundry #2

1.7.5 → 1.8.1 Minor PR

Closed 2 months ago 1 comment

Bump the go-dependencies group across 1 directory with 52 updates

radius-project/radius #10445

1.7.9 → 1.8.1 Minor PR

Open 2 months ago 3 comments

build(deps): bump the all group across 1 directory with 19 updates

Checkmarx/kics #7732

1.7.9 → 1.8.1 Minor PR

Open 2 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.6.2 to 1.8.1

JayT106/cosmos-sdk #957

1.6.2 → 1.8.1 Minor PR

Open 2 months ago 1 comment

Bump the go-modules group with 3 updates

paketo-buildpacks/cpython #1017

1.8.0 → 1.8.1 Patch PR

Merged 2 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.8.0 to 1.8.1

anchore/syft #4229

1.8.0 → 1.8.1 Patch PR

Merged 2 months ago

Bump github.com/hashicorp/go-getter from 1.6.2 to 1.8.1

aiyaya188/cosmos #798

1.6.2 → 1.8.1 Minor PR

Closed 2 months ago 2 comments

Bump the go-modules group with 3 updates

paketo-buildpacks/pip #757

1.8.0 → 1.8.1 Patch PR

Merged 2 months ago

Bump the go-modules group with 3 updates

paketo-buildpacks/yarn-install #1030

1.8.0 → 1.8.1 Patch PR

Open 2 months ago

Bump github.com/hashicorp/go-getter from 1.8.0 to 1.8.1

milgradesec/filter #158

1.8.0 → 1.8.1 Patch PR

Merged 2 months ago

build(deps): bump github.com/hashicorp/go-getter from 1.7.9 to 1.8.1

jpreese/conftest #67

1.7.9 → 1.8.1 Minor PR

Closed 2 months ago 1 comment

Bump the go-modules group with 3 updates

paketo-buildpacks/yarn #874

1.8.0 → 1.8.1 Patch PR

Merged 2 months ago

Bump github.com/hashicorp/go-getter from 1.6.2 to 1.8.1

speedspeedo/cosmos-sdk #709

1.6.2 → 1.8.1 Minor PR

Closed 2 months ago 2 comments

build(deps): Bump github.com/hashicorp/go-getter from 1.6.2 to 1.8.1

ShayneMichaelBacik1/cosmos-sdk #1400

1.6.2 → 1.8.1 Minor PR

Open 2 months ago 2 comments

build(deps): Bump github.com/hashicorp/go-getter from 1.8.0 to 1.8.1

akshiiitt/cosmos-quantum #15

1.8.0 → 1.8.1 Patch PR

Closed 2 months ago 2 comments

Bump the go-modules group with 3 updates

paketo-buildpacks/pipenv #706

1.8.0 → 1.8.1 Patch PR

Merged 2 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.6.2 to 1.8.1

althea-net/cosmos-sdk #1025

1.6.2 → 1.8.1 Minor PR

Open 2 months ago 1 comment

Bump the go-modules group with 3 updates

paketo-buildpacks/nginx #1001

1.8.0 → 1.8.1 Patch PR

Open 2 months ago

Bump github.com/hashicorp/go-getter from 1.6.1 to 1.8.1

hashicorp/consul-terraform-sync #1124

1.6.1 → 1.8.1 Minor PR

Open 2 months ago

chore(deps): Bump github.com/hashicorp/go-getter from 1.8.0 to 1.8.1

anchore/grype-db #696

1.8.0 → 1.8.1 Patch PR

Merged 2 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.8.0 to 1.8.1

ChainCatcher/cosmos-sdk #2734

1.8.0 → 1.8.1 Patch PR

Open 2 months ago 1 comment

build(deps): Bump github.com/hashicorp/go-getter from 1.8.0 to 1.8.1

cosmos/cosmos-sdk #25351

1.8.0 → 1.8.1 Patch PR

Merged 2 months ago

Bump the go-modules group with 3 updates

paketo-buildpacks/go-dist #1117

1.8.0 → 1.8.1 Patch PR

Open 2 months ago

build(deps): bump github.com/hashicorp/go-getter from 1.8.0 to 1.8.1

cloudfoundry/cloud-service-broker #1325

1.8.0 → 1.8.1 Patch PR

Open 2 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.6.2 to 1.8.1

crossfichain/cosmos-sdk #185

1.6.2 → 1.8.1 Minor PR

Closed 2 months ago 2 comments

Bump the go-modules group with 4 updates

paketo-buildpacks/poetry-install #471

1.8.0 → 1.8.1 Patch PR

Open 2 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.1 to 1.8.1

terra-money/cosmos-sdk #979

1.7.1 → 1.8.1 Minor PR

Open 2 months ago 2 comments

Bump the go-modules group across 1 directory with 49 updates

paketo-buildpacks/go-mod-vendor #927

1.7.9 → 1.8.1 Minor PR

Closed 2 months ago 1 comment

Bump the go-modules group with 4 updates

paketo-buildpacks/npm-install #1008

1.8.0 → 1.8.1 Patch PR

Open 2 months ago

Bump the go-modules group with 4 updates

paketo-buildpacks/httpd #917

1.8.0 → 1.8.1 Patch PR

Merged 2 months ago

build(deps): bump github.com/hashicorp/go-getter from 1.8.0 to 1.8.1

open-policy-agent/conftest #1174

1.8.0 → 1.8.1 Patch PR

Merged 2 months ago

Package Details

Name:	`github.com/hashicorp/go-getter`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/hashicorp/go-getter`
JSON API:	View JSON

Security Advisories

9

Active advisories

CRITICAL 2

HIGH 5

MODERATE 2

View All golang Advisories

Package Information

Description:

getter is a package for downloading files or directories from a variety of protocols. getter is unique in its ability to download both directories and files. It also detects certain source strings to be protocol-specific URLs. For example, "github.com/hashicorp/go-getter" would turn into a Git URL and use the Git protocol. Protocols and detectors are extensible. To get started, see Client.

Repository:	https://github.com/hashicorp/go-getter
Homepage:	https://github.com/hashicorp/go-getter
Latest Release:	`v1.7.8` 11 months ago
Dependent Repos:	6,872
Dependent Packages:	3,705
Ranking:	Top 0.0949% by dependent repos Top 0.0592% by dependent pkgs

PR Status

Open 694 (59.8%)

Merged 109 (9.4%)

Closed 341 (29.4%)

PR Types

Minor 399 (34.4%)

Patch 745 (64.2%)

github.com/hashicorp/go-getter

Security Advisories

HashiCorp go-getter Vulnerable to Symlink Attacks

Data Amplification in HashiCorp go-getter

HashiCorp go-getter command injection

HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion

HashiCorp go-getter unsafe downloads could lead to arbitrary host access

Recent PRs

Package Details

Security Advisories

9

Package Information

PR Status

PR Types

`github.com/hashicorp/go-getter`