HashiCorp Shared library

• CVE-2026-19585 Medium 5.3 Go-getter vulnerable to a path traversal in S3/GCS directory download handling 0.2%
• CVE-2026-88922 Medium 6.7 Go-getter vulnerable to a privilege escalation issue in its archive decompression handling 0.1%
• CVE-2026-14362 Medium 4.9 Denial of service via crafted push/pull gossip message in memberlist 0.3%
• CVE-2026-8052 Medium 6.0 Nomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack 0.1%
• CVE-2026-0969 High 8.8 Arbitrary code execution in React server-side rendering of untrusted MDX content 0.6%
• CVE-2025-8959 High 7.5 HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack 0.6%
• CVE-2025-0377 High 7.5 HashiCorp go-slug Vulnerable to Zip Slip Attack 0.7%
• CVE-2024-6257 High 8.4 HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation 1.0%
• CVE-2024-6104 Medium 6.0 go-retryablehttp can leak basic auth credentials to log files 0.4%
• CVE-2024-3817 Critical 9.8 HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches 1.3%