Threats tagged 'ghsa-86f4-5vj6-9fg3'

1 threat

Threats tagged 'ghsa-86f4-5vj6-9fg3'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-19585Shared library · Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Medium5.3EPSS 0.2%2026-10-08CVE Database V5CVE-2026-19585 CVE-2026-19585 is a path traversal vulnerability in HashiCorp's go-getter shared library affecting versions before 1.8.10 and go-getter/v2 before 2.2.5. It allows files to be written outside the intended destination directory during S3 and GCS directory downloads. This issue has been fixed in go-getter 1.8.10 and go-getter/v2 2.2.5. The vulnerability has a medium severity rating with a CVSS score of 5.3. EPSS 0.2%Vulnerability HashiCorp #cwe-22 #ghsa-86f4-5vj6-9fg3 #microsoft-security-response-ce	CVE Database V5	2026-10-08

Showing 1–1 of 1 result