HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches

HashiCorp go-slug Vulnerable to Zip Slip Attack

Arbitrary code execution in React server-side rendering of untrusted MDX content

HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation

HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack

Go-getter vulnerable to a privilege escalation issue in its archive decompression handling

Nomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack

go-retryablehttp can leak basic auth credentials to log files

Go-getter vulnerable to a path traversal in S3/GCS directory download handling

Denial of service via crafted push/pull gossip message in memberlist