Most recent entries from all

EUVD-2026-16457

fkie_cve-2022-30323

go-getter up to 1.5.11 and 2.0.2 panicked when processing password-protected ZIP files. Fixed in 1.6.1 and 2.1.0.

GHSA-28r2-q6m8-9hpx — HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion

Affected: Go: github.com/hashicorp/go-getter, Go: github.com/hashicorp/go-getter/v2, Go: github.com/hashicorp/go-getter/s3/v2, Go: github.com/hashicorp/go-getter/gcs/v2

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Asymmetric resource exhaustion could occur when go-getter processed malicious HTTP responses.

gsd-2022-30323

RHSA-2022:5069 — Red Hat Security Advisory: OpenShift Container Platform 4.11.0 bug fix and security update

nanoid: Information disclosure via valueOf() function sanitize-url: XSS due to improper sanitization in sanitizeUrl function opencontainers: OCI manifest and index parsing confusion golang.org/x/crypto: empty plaintext packet causes panic minimist: prototype pollution node-fetch: exposure of sensitive information to an unauthorized actor prometheus/client_golang: Denial of service using InstrumentHandlerCounter go-getter: command injection vulnerability golang: crash in a golang.org/x/crypto/ssh server go-getter: writes SSH credentials into logfile, exposing sensitive credentials to local uses go-getter: unsafe download (issue 1 of 3) go-getter: unsafe download (issue 2 of 3) go-getter: unsafe download (issue 3 of 3)

UBUNTU-CVE-2022-30323

Affected: Ubuntu:18.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:20.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:20.04:LTS: golang-github-jesseduffield-go-getter, Ubuntu:22.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:22.04:LTS: golang-github-jesseduffield-go-getter, Ubuntu:24.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:24.04:LTS: golang-github-jesseduffield-go-getter, Ubuntu:25.10: golang-github-hashicorp-go-getter

go-getter up to 1.5.11 and 2.0.2 panicked when processing password-protected ZIP files. Fixed in 1.6.1 and 2.1.0.

WID-SEC-W-2022-0779 — Red Hat OpenStack: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.