VDB
DEBIAN-CVE-2022-26945
DEBIAN-CVE-2022-26945
PUBLISHED
CVSS 9.800000190734863 CRITICAL
go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.0.
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | golang-github-hashicorp-go-getter | 0, 1.4.1-1, 0 |
| Debian:12 | golang-github-hashicorp-go-getter | 0, 1.4.1-1, 0 |
Timeline
- May 25, 2022 CVE Published
- Apr 28, 2026 CVE Updated