| Bug | bookworm | forky | sid | Description |
|---|
| CVE-2026-88922 | vulnerable (no DSA, postponed) | fixed | fixed | The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to ... |
| CVE-2026-19585 | vulnerable (no DSA) | fixed | fixed | HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions b ... |
| CVE-2026-4660 | vulnerable (no DSA) | fixed | fixed | HashiCorp\u2019s go-getter library up to v1.8.5 may allow arbitrary fi ... |
| CVE-2025-8959 | vulnerable (no DSA, ignored) | fixed | fixed | HashiCorp's go-getter library subdirectory download feature is vulnera ... |
| CVE-2024-6257 | vulnerable (no DSA, ignored) | fixed | fixed | HashiCorp\u2019s go-getter library can be coerced into executing Git u ... |
| CVE-2024-3817 | vulnerable (no DSA, ignored) | fixed | fixed | HashiCorp\u2019s go-getter library is vulnerable to argument injection ... |
| CVE-2023-0475 | vulnerable (no DSA, ignored) | fixed | fixed | HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompressi ... |
| CVE-2022-30323 | vulnerable (no DSA, ignored) | fixed | fixed | go-getter up to 1.5.11 and 2.0.2 panicked when processing password-pro ... |
| CVE-2022-30322 | vulnerable (no DSA, ignored) | fixed | fixed | go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource exhaustio ... |
| CVE-2022-30321 | vulnerable (no DSA, ignored) | fixed | fixed | go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go- ... |
| CVE-2022-26945 | vulnerable (no DSA, ignored) | fixed | fixed | go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless r ... |