https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T20:43:47.135708+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-384692 EUVD-2026-384692 2026-10-18T20:43:47.142790+00:00 EUVD-2026-384692 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19585 fkie_cve-2026-19585 2026-10-18T20:43:47.142824+00:00

HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to be written outside the requested destination. This vulnerability (CVE-2026-19585) is fixed in go-getter 1.8.10 and go-getter/v2 2.2.5.

 https://cve.radiocsirt.org/vuln/ghsa-86f4-5vj6-9fg3 GHSA-86f4-5vj6-9fg3 2026-10-18T20:43:47.142855+00:00

HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to be written outside the requested destination. This vulnerability (CVE-2026-19585) is fixed in go-getter 1.8.10 and go-getter/v2 2.2.5.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-19585 msrc_CVE-2026-19585 — Go-getter vulnerable to a path traversal in S3/GCS directory download handling 2026-10-18T20:43:47.142872+00:00 msrc_CVE-2026-19585 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-19585 UBUNTU-CVE-2026-19585 2026-10-18T20:43:47.142889+00:00

Affected: Ubuntu:18.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:20.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:22.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:24.04:LTS: golang-github-hashicorp-go-getter

HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to be written outside the requested destination. This vulnerability (CVE-2026-19585) is fixed in go-getter 1.8.10 and go-getter/v2 2.2.5.