{"action":"Upgrade github.com/hashicorp/go-getter to 1.5.11 or later.","affected":[{"fixed":"1.5.11","introduced":"0"}],"component":"github.com/hashicorp/go-getter","cve_ids":["CVE-2022-29810"],"ecosystem":"Go","epss":0.0041,"exploited":false,"fixed_versions":["1.5.11"],"ghsa_id":"GHSA-27rq-4943-qcwp","id":"tcs_01M5KERQZ2BMWE8NXYJHA7CNNY","modified_at":"2023-11-08T04:09:14.685218Z","published_at":"2022-04-28T00:00:35Z","references":["https://osv.dev/vulnerability/GHSA-27rq-4943-qcwp","https://nvd.nist.gov/vuln/detail/CVE-2022-29810","https://github.com/hashicorp/go-getter/pull/348","https://github.com/hashicorp/go-getter/commit/36b68b2f68a3ed10ee7ecbb0cb9f6b1dc5da49cc","https://github.com/hashicorp/go-getter","https://github.com/hashicorp/go-getter/releases/tag/v1.5.11","https://pkg.go.dev/vuln/GO-2022-0438"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-27rq-4943-qcwp","url":"https://osv.dev/vulnerability/GHSA-27rq-4943-qcwp"}],"summary":"Insertion of Sensitive Information into Log File in Hashicorp go-getter"}