← Database

CVE-2023-0475

MEDIUM CVSS: 4.2 Published: 2023-02-16 Modified: 2026-06-17

Description

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0.

Affected Platforms

Hashicorp Go-Getter

Weakness Type

CWE-409, NVD-CWE-Other

References