github.com/hashicorp/.../go-getter vulnerabilities

licenses detected

MPL-2.0
>=v0

View go-getter package health on Snyk Advisor (opens in a new tab)

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the github.com/hashicorp/go-getter package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Symlink Attack	<1.7.9
H Command Injection	<1.7.5
H Argument Injection	>=1.5.9 <1.7.4
M Denial of Service (DoS)	<1.7.0
H Privilege Escalation	<1.6.1>=2.0.0 <2.1.0
H Privilege Escalation	<1.6.1>=2.0.0 <2.1.0
H Privilege Escalation	<1.6.1>=2.0.0 <2.1.0
H Command Injection	<1.6.1>=2.0.0 <2.1.0