CVE-2022-29810
2 advisories.
Go/github.com/hashicorp/go-getter CVE-2022-29810: medium 5.5, EPSS 0.41%
Insertion of Sensitive Information into Log File in Hashicorp go-getter
Action: Upgrade github.com/hashicorp/go-getter to 1.5.11 or later.
go get github.com/hashicorp/go-getter@v1.5.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.11 | - |
Fixed versions
| 1.5.11 |
Sources
- osv: GHSA-27rq-4943-qcwp
- https://nvd.nist.gov/vuln/detail/CVE-2022-29810
- https://github.com/hashicorp/go-getter/pull/348
- https://github.com/hashicorp/go-getter/commit/36b68b2f68a3ed10ee7ecbb0cb9f6b1dc5da49cc
- https://github.com/hashicorp/go-getter
- https://github.com/hashicorp/go-getter/releases/tag/v1.5.11
- https://pkg.go.dev/vuln/GO-2022-0438
CVE-2022-29810 · published · modified · JSON
Go/github.com/hashicorp/go-getter CVE-2022-29810: unknown, EPSS 0.41%
Exposure of sensitive information via log file in github.com/hashicorp/go-getter
Action: Upgrade github.com/hashicorp/go-getter to 1.5.11 or later.
go get github.com/hashicorp/go-getter@v1.5.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.11 | - |
Fixed versions
| 1.5.11 |
Sources
- osv: GO-2022-0438
- https://github.com/hashicorp/go-getter/pull/348
- https://github.com/hashicorp/go-getter/commit/36b68b2f68a3ed10ee7ecbb0cb9f6b1dc5da49cc
- https://github.com/hashicorp/go-getter/releases/tag/v1.5.11
CVE-2022-29810 · published · modified · JSON