`github.com/hashicorp/go-getter`

Ecosystem:
go

Package URL:
pkg:golang/github.com/hashicorp/go-getter

Total PRs:
1,163 Dependabot PRs

Latest PR:
7 days ago

Unique Repositories:
559 repositories

Unique Repos (30 days):
31 repositories

Security Advisories

Data Amplification in HashiCorp go-getter

GHSA-jpxj-2jvg-6jv9 CVE-2023-0475 MODERATE published almost 3 years ago • updated 7 days ago

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0.

HashiCorp go-getter command injection

GHSA-x24g-9w7v-vprh CVE-2022-26945 CRITICAL published over 3 years ago • updated 10 days ago

HashiCorp go-getter before 2.0.2 allows Command Injection.

HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion

GHSA-28r2-q6m8-9hpx CVE-2022-30323 HIGH published over 3 years ago • updated 10 days ago

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Asymmetric resource exhaustion could occur when go-getter processed malicious ...

HashiCorp go-getter unsafe downloads could lead to arbitrary host access

GHSA-cjr4-fv6c-f3mv CVE-2022-30322 HIGH published over 3 years ago • updated 10 days ago

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Arbitrary host access was possible via go-getter path traversal, symlink proce...

Insertion of Sensitive Information into Log File in Hashicorp go-getter

GHSA-27rq-4943-qcwp CVE-2022-29810 MODERATE published over 3 years ago • updated 10 days ago

The Hashicorp go-getter library before 1.5.11 could write SSH credentials into its logfile, exposing sensitive credentials to local users able to r...

View all 9 advisories

Recent PRs

RSS Feed

build(deps): Bump github.com/hashicorp/go-getter from 1.7.0 to 1.8.0 in /x/upgrade

jatincr7/cosmos-sdk #2073

1.7.0 → 1.8.0 Minor PR

Closed 3 months ago 2 comments

chore(deps): bump the common group across 1 directory with 33 updates

tnir/trivy #267

1.7.9 → 1.8.0 Minor PR

Closed 3 months ago 1 comment

Bump the go-modules group across 1 directory with 53 updates

paketo-buildpacks/go-mod-vendor #921

1.7.9 → 1.8.0 Minor PR

Open 3 months ago 1 comment

chore(deps): bump the common group across 1 directory with 51 updates

tonaim/trivy #346

1.7.8 → 1.8.0 Minor PR

Open 3 months ago 2 comments

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.8.0

twelvelabs/envctl #45

1.7.8 → 1.8.0 Minor PR

Closed 3 months ago 1 comment

build(deps): bump github.com/hashicorp/go-getter from 1.7.9 to 1.8.0

open-policy-agent/conftest #1169

1.7.9 → 1.8.0 Minor PR

Merged 3 months ago

Chore: (deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.8.0

kcl-lang/kpm #669

1.7.8 → 1.8.0 Minor PR

Closed 3 months ago 1 comment

Bump the go-dependencies group across 1 directory with 47 updates

brooke-hamilton/radius #134

1.7.9 → 1.8.0 Minor PR

Open 3 months ago 2 comments

chore(deps): bump the common group across 1 directory with 64 updates

k-hal/trivy #393

1.7.6 → 1.8.0 Minor PR

Open 3 months ago 2 comments

Bump the go-modules group with 84 updates

paketo-buildpacks/pip-install #487

1.7.8 → 1.7.9 Patch PR

Open 3 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.9 to 1.8.0

anchore/grype #2923

1.7.9 → 1.8.0 Minor PR

Open 3 months ago

chore: Bump github.com/hashicorp/go-getter from 1.7.9 to 1.8.0

chanzuckerberg/fogg #1141

1.7.9 → 1.8.0 Minor PR

Merged 3 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.8.0

chanzuckerberg/blessclient #316

1.7.8 → 1.8.0 Minor PR

Closed 3 months ago 1 comment

Bump the go-modules group with 12 updates

paketo-buildpacks/cpython #1007

1.7.10 → 1.8.0 Minor PR

Open 3 months ago

chore(deps): bump the common group across 1 directory with 58 updates

suryatmodulus/trivy #336

1.7.8 → 1.8.0 Minor PR

Open 3 months ago 3 comments

chore(deps): bump the common group across 1 directory with 30 updates

MaineK00n/trivy #333

1.7.9 → 1.8.0 Minor PR

Open 3 months ago 3 comments

build(deps): Bump github.com/hashicorp/go-getter from 1.6.2 to 1.8.0

JayT106/cosmos-sdk #951

1.6.2 → 1.8.0 Minor PR

Open 3 months ago 1 comment

chore(deps): bump the common group across 1 directory with 19 updates

aquasecurity/trivy #9454

1.7.9 → 1.8.0 Minor PR

Open 3 months ago

Bump the go-modules group with 83 updates

paketo-buildpacks/poetry #479

1.7.8 → 1.7.9 Patch PR

Closed 3 months ago 1 comment

Bump github.com/hashicorp/go-getter from 1.7.0 to 1.8.0 in /tools/cosmovisor

luannvv/cosmos-sdk #596

1.7.0 → 1.8.0 Minor PR

Open 3 months ago 1 comment

Bump the go-modules group with 24 updates

paketo-buildpacks/pipenv-install #507

1.7.9 → 1.8.0 Minor PR

Merged 3 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.10 to 1.8.0

anchore/syft #4197

1.7.10 → 1.8.0 Minor PR

Open 3 months ago

Bump the go-modules group with 24 updates

paketo-buildpacks/pip #741

1.7.9 → 1.8.0 Minor PR

Merged 3 months ago

Bump github.com/hashicorp/go-getter from 1.7.10 to 1.8.0

milgradesec/filter #156

1.7.10 → 1.8.0 Minor PR

Merged 3 months ago

Bump the go-modules group with 11 updates

paketo-buildpacks/yarn-install #1019

1.7.10 → 1.8.0 Minor PR

Merged 3 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.0 to 1.8.0 in /tools/cosmovisor

desmos-labs/cosmos-sdk #871

1.7.0 → 1.8.0 Minor PR

Open 3 months ago 1 comment

build(deps): bump github.com/hashicorp/go-getter from 1.7.9 to 1.8.0

jpreese/conftest #65

1.7.9 → 1.8.0 Minor PR

Closed 3 months ago 1 comment

Bump the go-modules group across 1 directory with 79 updates

paketo-buildpacks/miniconda #642

1.7.9 → 1.8.0 Minor PR

Open 3 months ago 1 comment

chore(deps): bump the common group across 1 directory with 53 updates

foo-bar-foo/trivy #49

1.7.8 → 1.8.0 Minor PR

Closed 3 months ago 1 comment

Bump the go-modules group with 83 updates

paketo-buildpacks/miniconda #639

1.7.9 → 1.8.0 Minor PR

Open 3 months ago

Bump the go-modules group with 11 updates

paketo-buildpacks/yarn #863

1.7.10 → 1.8.0 Minor PR

Merged 3 months ago

chore(deps): bump github.com/hashicorp/go-getter from 1.7.10 to 1.8.0

kyverno/chainsaw #2476

1.7.10 → 1.8.0 Minor PR

Merged 3 months ago 1 comment

build(deps): Bump github.com/hashicorp/go-getter from 1.6.2 to 1.8.0 in /tools/cosmovisor

sacasnetwork/cosmos-sdk #293

1.6.2 → 1.8.0 Minor PR

Closed 3 months ago 2 comments

fix(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.8.0

keilerkonzept/terraform-module-versions #152

1.7.8 → 1.8.0 Minor PR

Merged 3 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.6.2 to 1.8.0 in /tools/cosmovisor

ShayneMichaelBacik1/cosmos-sdk #1383

1.6.2 → 1.8.0 Minor PR

Open 3 months ago 2 comments

build(deps): Bump github.com/hashicorp/go-getter from 1.6.2 to 1.8.0

ShayneMichaelBacik1/cosmos-sdk #1381

1.6.2 → 1.8.0 Minor PR

Open 3 months ago 1 comment

build(deps): Bump the all-go-mod-patch-and-minor group across 1 directory with 15 updates

mesosphere/mindthegap #941

1.7.9 → 1.8.0 Minor PR

Merged 3 months ago 2 comments

Bump the go-modules group with 23 updates

paketo-buildpacks/pipenv #692

1.7.9 → 1.8.0 Minor PR

Merged 3 months ago

Bump the go-modules group across 1 directory with 46 updates

paketo-buildpacks/go-build #883

1.7.9 → 1.8.0 Minor PR

Closed 3 months ago 1 comment

build(deps): Bump github.com/hashicorp/go-getter from 1.6.2 to 1.8.0 in /tools/cosmovisor

Flamma-Labs/cosmos-sdk #513

1.6.2 → 1.8.0 Minor PR

Closed 3 months ago 2 comments

Bump github.com/hashicorp/go-getter from 1.6.2 to 1.8.0 in /tools/cosmovisor

xiaobo88michael/cosmos-sdk #1169

1.6.2 → 1.8.0 Minor PR

Open 3 months ago 1 comment

Bump github.com/hashicorp/go-getter from 1.6.1 to 1.8.0

hashicorp/consul-terraform-sync #1122

1.6.1 → 1.8.0 Minor PR

Closed 3 months ago 1 comment

Bump the go-dependencies group across 1 directory with 43 updates

radius-project/radius #10351

1.7.9 → 1.8.0 Minor PR

Open 3 months ago

chore(deps): bump the common group across 1 directory with 16 updates

aiflash/trivy #347

1.7.9 → 1.8.0 Minor PR

Open 3 months ago 1 comment

build(deps): Bump github.com/hashicorp/go-getter from 1.7.2 to 1.8.0 in /x/upgrade

giovanny972/Blockchains---Capsule #167

1.7.2 → 1.8.0 Minor PR

Open 3 months ago 1 comment

Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9

paketo-buildpacks/pipenv #691

1.7.8 → 1.7.9 Patch PR

Open 3 months ago

build(deps): Bump github.com/hashicorp/go-getter from 1.7.6 to 1.8.0 in /x/upgrade

WalkerEnterprise/cosmos-sdk #209

1.7.6 → 1.8.0 Minor PR

Closed 3 months ago 2 comments

Bump github.com/hashicorp/go-getter from 1.7.4 to 1.8.0 in /x/upgrade

theshivammaurya/cosmos-sdk #219

1.7.4 → 1.8.0 Minor PR

Open 3 months ago 1 comment

build(deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.8.0 in /x/upgrade

KOSASIH/cosmos-sdk #1137

1.7.8 → 1.8.0 Minor PR

Closed 3 months ago 2 comments

Bump github.com/hashicorp/go-getter from 1.7.8 to 1.8.0 in /x/upgrade

mian4671/Faisal #540

1.7.8 → 1.8.0 Minor PR

Closed 3 months ago 2 comments

Package Details

Name:	`github.com/hashicorp/go-getter`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/hashicorp/go-getter`
JSON API:	View JSON

Security Advisories

9

Active advisories

CRITICAL 2

HIGH 5

MODERATE 2

View All golang Advisories

Package Information

Description:

getter is a package for downloading files or directories from a variety of protocols. getter is unique in its ability to download both directories and files. It also detects certain source strings to be protocol-specific URLs. For example, "github.com/hashicorp/go-getter" would turn into a Git URL and use the Git protocol. Protocols and detectors are extensible. To get started, see Client.

Repository:	https://github.com/hashicorp/go-getter
Homepage:	https://github.com/hashicorp/go-getter
Latest Release:	`v1.7.8` 11 months ago
Dependent Repos:	6,872
Dependent Packages:	3,705
Ranking:	Top 0.0949% by dependent repos Top 0.0592% by dependent pkgs

PR Status

Open 694 (59.7%)

Merged 109 (9.4%)

Closed 343 (29.5%)

PR Types

Minor 400 (34.4%)

Patch 746 (64.1%)