Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 1.0% on proxy.golang.org
Top 0.3% dependent packages on proxy.golang.org
Top 0.4% dependent repos on proxy.golang.org
Top 2.0% forks on proxy.golang.org
Top 0.4% docker downloads on proxy.golang.org

proxy.golang.org : github.com/hashicorp/go-getter/v2

getter is a package for downloading files or directories from a variety of protocols. getter is unique in its ability to download both directories and files. It also detects certain source strings to be protocol-specific URLs. For example, "github.com/hashicorp/go-getter/v2" would turn into a Git URL and use the Git protocol. Protocols and detectors are extensible. To get started, see Client.

Registry - Source - Documentation - JSON
purl: pkg:golang/github.com/hashicorp/go-getter/v2
License: MPL-2.0
Latest release: about 1 year ago
First release: over 3 years ago
Namespace: github.com/hashicorp/go-getter
Dependent packages: 195
Dependent repositories: 234
Stars: 1,465 on GitHub
Forks: 190 on GitHub
Docker dependents: 168
Docker downloads: 14,942,813
See more repository details: repos.ecosyste.ms
Last synced: 4 days ago

High

GSA_kwCzR0hTQS1janI0LWZ2NmMtZjNtds4AArN5

HashiCorp go-getter unsafe downloads could lead to arbitrary host access
Ecosystems: go
Packages: github.com/hashicorp/go-getter/gcs/v2, github.com/hashicorp/go-getter/s3/v2, github.com/hashicorp/go-getter/v2, github.com/hashicorp/go-getter
Source: github
Published: about 2 years ago

Moderate

GSA_kwCzR0hTQS1qcHhqLTJqdmctNmp2Oc4AAxsJ

Data Amplification in HashiCorp go-getter
Ecosystems: go
Packages: github.com/hashicorp/go-getter/v2, github.com/hashicorp/go-getter
Source: github
Published: over 1 year ago

High

GSA_kwCzR0hTQS0yOHIyLXE2bTgtOWhweM4AArN7

HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion
Ecosystems: go
Packages: github.com/hashicorp/go-getter/gcs/v2, github.com/hashicorp/go-getter/s3/v2, github.com/hashicorp/go-getter/v2, github.com/hashicorp/go-getter
Source: github
Published: about 2 years ago

High

GSA_kwCzR0hTQS1mY2dnLXJ2d2ctanY1OM4AArNo

HashiCorp go-getter unsafe downloads
Ecosystems: go
Packages: github.com/hashicorp/go-getter/gcs/v2, github.com/hashicorp/go-getter/s3/v2, github.com/hashicorp/go-getter/v2, github.com/hashicorp/go-getter
Source: github
Published: about 2 years ago

Critical

GSA_kwCzR0hTQS14MjRnLTl3N3YtdnByaM4AArN3

HashiCorp go-getter command injection
Ecosystems: go
Packages: github.com/hashicorp/go-getter/gcs/v2, github.com/hashicorp/go-getter/s3/v2, github.com/hashicorp/go-getter/v2, github.com/hashicorp/go-getter
Source: github
Published: about 2 years ago