| Package | Affected versions | Patched versions |
|---|---|---|
| go-getter | = 2.0.2≤ 1.5.11 |
go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws. Fixed in 1.6.1 and 2.1.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free