Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws. Fixed in 1.6.1 and 2.1.0.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HashiCorp go-getter 命令注入漏洞
Vulnerability Description
HashiCorp go-getter是美国HashiCorp公司的Go (golang) 的一个库，用于使用 URL 作为主要输入形式从各种来源下载文件或目录。 HashiCorp go-getter 2.0.2 版本及之前版本存在命令注入漏洞，该漏洞源于不能安全地执行下载。
CVSS Information
N/A
Vulnerability Type
N/A