← Database

CVE-2022-26945

CRITICAL CVSS: 9.8 Published: 2022-05-25 Modified: 2026-06-17

Description

go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.0.

Affected Platforms

Hashicorp Go-Getter

Weakness Type

NVD-CWE-noinfo

References