CVE-2022-29810

State: Published
Severity: Not scored
Published: Apr 27, 2022
Updated: Aug 3, 2024
Reserved: Apr 27, 2022

Read the record on cve.org

Description

The Hashicorp go-getter library before 1.5.11 does not redact an SSH key from a URL query parameter.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://github.com/hashicorp/go-getter/pull/348
https://github.com/hashicorp/go-getter/releases/tag/v1.5.11
https://github.com/hashicorp/go-getter/commit/36b68b2f68a3ed10ee7ecbb0cb9f6b1dc5da49cc

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.