Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-8959 1 Hashicorp 1 Go-getter 2025-12-11 7.5 High
HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9.