https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T08:55:15.390490+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/ghsa-92mm-2pjq-r785 GHSA-92mm-2pjq-r785 — HashiCorp's go-getter library may allow arbitrary file reads 2026-10-03T08:55:15.407829+00:00

Affected: Go: github.com/hashicorp/go-getter

HashiCorp's go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This is fixed in go-getter v1.8.6. This vulnerability does not affect the go-getter/v2 branch and package.