Security Advisory

CVE-2023-0475

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-02-16 18:35:37
Last updated 2025-03-18 14:39:33
Assigner HashiCorp
State PUBLISHED

Description

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0.