VDB
GO-2024-2800
GO-2024-2800
PUBLISHED
Argument injection when fetching remote default Git branches in github.com/hashicorp/go-getter
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | tfsec | 0, 0 |
| chainguard | conftest-fips | 0, 0 |
| chainguard | kubescape | 0, 0 |
| wolfi | k9s | 0, 0, 0 |
| wolfi | zot | 0, 0, 0 |
| chainguard | conftest | 0, 0 |
| github.com | hashicorp/go-getter | 1.5.9, 1.5.9 |
| wolfi | terraform | 0, 0, 0 |
| chainguard | zot | 0, 0 |
| chainguard | terraform | 0, 0 |
| wolfi | tfsec | 0, 0, 0 |
| wolfi | kubescape | 0, 0, 0 |
| chainguard | k9s | 0, 0 |
| wolfi | tflint | 0, 0, 0 |
| chainguard | tflint | 0, 0 |
| chainguard | zarf | 0, 0 |
| wolfi | zarf | 0, 0, 0 |
| wolfi | conftest | 0, 0, 0 |
Timeline
- May 10, 2024 CVE Published
- Feb 4, 2026 CVE Updated