{"schemaVersion":3,"id":"CVE-2024-6257","aliases":["UBUNTU-CVE-2024-6257","DEBIAN-CVE-2024-6257","CGA-247q-6jj9-hq4g","CGA-26j8-5wv9-mh35","CGA-2842-c9mv-hqqj","CGA-2v5j-g6c6-3q62","CGA-32pp-hc63-2rv8","CGA-3c36-2j6x-92mx","CGA-3cfq-5gw9-jmw6","CGA-3h93-rg85-m283","CGA-4jrf-rq9f-wm68","CGA-54qp-vp93-wfw7","CGA-752f-277x-vv5r","CGA-7fqc-4wv4-x9j9","CGA-7j73-87jq-m72w","CGA-7xcm-vwm6-qwfw","CGA-83q2-xcmp-3jmm","CGA-88gj-whgh-37mv","CGA-8pmf-932r-qp52","CGA-8vvp-67xv-wx53","CGA-9mhg-44fc-h8ph","CGA-cq94-g86j-7p3q","CGA-fxfq-wwr4-rvgv","CGA-g2fh-f4x2-f783","CGA-gjq3-8h7q-vvpf","CGA-j464-43h2-j4hc","CGA-j689-cqc7-pfpv","CGA-mwcp-mg85-86qw","CGA-mxm2-xgjx-whqf","CGA-q7h9-jcrg-chh2","CGA-qh45-hvjj-p665","CGA-qmqj-9mc3-2336","CGA-qp7w-hm97-2v22","CGA-v3qm-2wq4-fhvg","CGA-v4fw-q4pf-mrhq","CGA-v73p-wxjc-9vcr","CGA-w6h3-qmx2-q8fq","CGA-wcj4-259w-fp75","CGA-x3jf-jgm8-wxxw","CGA-xwv7-fw9c-59v6","GHSA-xfhp-jf8p-mh5w","GO-2024-2948","openSUSE-SU-2024:14183-1","openSUSE-SU-2024:14190-1","CGA-6qqj-9vqq-r85x","CGA-842f-p67m-rjq5","CGA-c6rr-qfgg-8r4q","CGA-g2h5-qjxr-4r5f"],"status":"published","duplicateOf":null,"title":null,"description":"HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git Configuration, potentially leading to arbitrary code execution.","dates":{"published":"2024-06-25T16:31:03.882Z","modified":"2024-08-01T21:33:05.245Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":8.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","exploitability":4.4,"impact":10,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Go","score":8.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","exploitability":4.4,"impact":10,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":8.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","exploitability":4.4,"impact":10,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00981,"percentile":0.61672,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.007999999999999848,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00973},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00973,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00973,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00973,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00973,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00973,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00973,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00973,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00973,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00973,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00981,"percentile":0.61672}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00973,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00973,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00973,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00981,"percentile":0.61672}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-77","name":"Improper Neutralization of Special Elements used in a Command ('Command Injection')","description":"The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/77.html"}],"affected":[{"vendor":"chainguard","product":"conftest","name":"conftest","label":"conftest","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conftest","purlType":"apk","versions":[{"text":"< 0.53.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conftest-fips","name":"conftest-fips","label":"conftest-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conftest-fips","purlType":"apk","versions":[{"text":"< 0.53.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grype","name":"grype","label":"grype","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grype","purlType":"apk","versions":[{"text":"< 0.79.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.79.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k9s","name":"k9s","label":"k9s","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k9s","purlType":"apk","versions":[{"text":"< 0.32.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.32.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kots","name":"kots","label":"kots","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kots","purlType":"apk","versions":[{"text":"< 1.109.14-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.109.14-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kots-compat","name":"kots-compat","label":"kots-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kots-compat","purlType":"apk","versions":[{"text":"< 1.109.14-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.109.14-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kots-symlink-compat","name":"kots-symlink-compat","label":"kots-symlink-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kots-symlink-compat","purlType":"apk","versions":[{"text":"< 1.109.14-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.109.14-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubescape","name":"kubescape","label":"kubescape","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubescape","purlType":"apk","versions":[{"text":"< 3.0.11-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.11-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"snyk-cli","name":"snyk-cli","label":"snyk-cli","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/snyk-cli","purlType":"apk","versions":[{"text":"< 1.1291.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1291.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terraform","name":"terraform","label":"terraform","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terraform","purlType":"apk","versions":[{"text":"< 1.5.7-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.7-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terraform-local-provider-config","name":"terraform-local-provider-config","label":"terraform-local-provider-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terraform-local-provider-config","purlType":"apk","versions":[{"text":"< 1.5.7-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.7-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terragrunt","name":"terragrunt","label":"terragrunt","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terragrunt","purlType":"apk","versions":[{"text":"< 0.59.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terragrunt-docs","name":"terragrunt-docs","label":"terragrunt-docs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terragrunt-docs","purlType":"apk","versions":[{"text":"< 0.59.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tflint","name":"tflint","label":"tflint","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tflint","purlType":"apk","versions":[{"text":"< 0.51.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.51.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tflint-compat","name":"tflint-compat","label":"tflint-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tflint-compat","purlType":"apk","versions":[{"text":"< 0.51.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.51.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tfsec","name":"tfsec","label":"tfsec","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tfsec","purlType":"apk","versions":[{"text":"< 1.28.6-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.28.6-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trivy","name":"trivy","label":"trivy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trivy","purlType":"apk","versions":[{"text":"< 0.52.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.52.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trivy-fips","name":"trivy-fips","label":"trivy-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trivy-fips","purlType":"apk","versions":[{"text":"< 0.52.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.52.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wolfictl","name":"wolfictl","label":"wolfictl","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wolfictl","purlType":"apk","versions":[{"text":"< 0.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zarf","name":"zarf","label":"zarf","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zarf","purlType":"apk","versions":[{"text":"< 0.35.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.35.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zot","name":"zot","label":"zot","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zot","purlType":"apk","versions":[{"text":"< 2.0.4-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.4-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"conftest","name":"conftest","label":"conftest","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/conftest","purlType":"apk","versions":[{"text":"< 0.53.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"grype","name":"grype","label":"grype","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/grype","purlType":"apk","versions":[{"text":"< 0.79.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.79.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k9s","name":"k9s","label":"k9s","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k9s","purlType":"apk","versions":[{"text":"< 0.32.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.32.5-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kots","name":"kots","label":"kots","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kots","purlType":"apk","versions":[{"text":"< 1.109.14-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.109.14-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kots-compat","name":"kots-compat","label":"kots-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kots-compat","purlType":"apk","versions":[{"text":"< 1.109.14-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.109.14-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kots-symlink-compat","name":"kots-symlink-compat","label":"kots-symlink-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kots-symlink-compat","purlType":"apk","versions":[{"text":"< 1.109.14-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.109.14-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubescape","name":"kubescape","label":"kubescape","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubescape","purlType":"apk","versions":[{"text":"< 3.0.11-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.11-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"snyk-cli","name":"snyk-cli","label":"snyk-cli","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/snyk-cli","purlType":"apk","versions":[{"text":"< 1.1291.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1291.1-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"terraform","name":"terraform","label":"terraform","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/terraform","purlType":"apk","versions":[{"text":"< 1.5.7-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.7-r14","eol":null,"hubHref":null},{"vendor":"wolfi","product":"terraform-local-provider-config","name":"terraform-local-provider-config","label":"terraform-local-provider-config","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/terraform-local-provider-config","purlType":"apk","versions":[{"text":"< 1.5.7-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.7-r14","eol":null,"hubHref":null},{"vendor":"wolfi","product":"terragrunt","name":"terragrunt","label":"terragrunt","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/terragrunt","purlType":"apk","versions":[{"text":"< 0.59.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.5-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"terragrunt-docs","name":"terragrunt-docs","label":"terragrunt-docs","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/terragrunt-docs","purlType":"apk","versions":[{"text":"< 0.59.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.5-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tflint","name":"tflint","label":"tflint","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tflint","purlType":"apk","versions":[{"text":"< 0.51.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.51.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tflint-compat","name":"tflint-compat","label":"tflint-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tflint-compat","purlType":"apk","versions":[{"text":"< 0.51.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.51.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tfsec","name":"tfsec","label":"tfsec","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tfsec","purlType":"apk","versions":[{"text":"< 1.28.6-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.28.6-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trivy","name":"trivy","label":"trivy","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trivy","purlType":"apk","versions":[{"text":"< 0.52.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.52.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"wolfictl","name":"wolfictl","label":"wolfictl","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/wolfictl","purlType":"apk","versions":[{"text":"< 0.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zarf","name":"zarf","label":"zarf","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zarf","purlType":"apk","versions":[{"text":"< 0.35.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.35.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zot","name":"zot","label":"zot","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zot","purlType":"apk","versions":[{"text":"< 2.0.4-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.4-r8","eol":null,"hubHref":null},{"vendor":"debian","product":"golang-github-hashicorp-go-getter","name":"golang-github-hashicorp-go-getter","label":"golang-github-hashicorp-go-getter","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/golang-github-hashicorp-go-getter","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-github-hashicorp-go-getter","name":"golang-github-hashicorp-go-getter","label":"golang-github-hashicorp-go-getter","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-github-hashicorp-go-getter","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-github-jesseduffield-go-getter","name":"golang-github-jesseduffield-go-getter","label":"golang-github-jesseduffield-go-getter","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-github-jesseduffield-go-getter","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"github.com/hashicorp","product":"go-getter","name":"github.com/hashicorp/go-getter","label":"go-getter","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/hashicorp/go-getter","purlType":"golang","versions":[{"text":"< 1.7.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5","eol":null,"hubHref":null},{"vendor":"hashicorp","product":"go-getter","name":"go-getter","label":"go-getter","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.7.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5","eol":null,"hubHref":"/vendor/hashicorp/go-getter"},{"vendor":"hashicorp","product":"shared library","name":"Shared library","label":"shared library","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.7.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.4","eol":null,"hubHref":"/vendor/hashicorp/shared_library"},{"vendor":"opensuse","product":"conftest&distro=openSUSE Tumbleweed","name":"conftest","label":"conftest&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/conftest&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 0.54.0-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.54.0-1.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"trivy&distro=openSUSE Tumbleweed","name":"trivy","label":"trivy&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/trivy&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 0.53.0-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-1.1","eol":null,"hubHref":null}],"affectedCount":48,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://discuss.hashicorp.com/t/hcsec-2024-13-hashicorp-go-getter-vulnerable-to-code-execution-on-git-update-via-git-config-manipulation/68081","label":"discuss.hashicorp.com/t/…","hostname":"discuss.hashicorp.com","tags":["REPORT","WEB","Vendor Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-6257","label":"ubuntu.com/security/CVE-2024-6257","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-6257","label":"www.cve.org/CVERecord?id=CVE-2024-6257","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://github.com/hashicorp/go-getter/pull/497","label":"github.com/hashicorp/go-getter/pull/497","hostname":"github.com","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-6257","label":"security-tracker.debian.org/tracker/CVE-2024-6257","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6257.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6257.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6257","label":"nvd.nist.gov/vuln/detail/CVE-2024-6257","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/hashicorp/go-getter","label":"github.com/hashicorp/go-getter","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/hashicorp/go-getter/commit/268c11cae8cf0d9374783e06572679796abe9ce9","label":"github.com/hashicorp/go-getter/commit/268c11cae8cf0d9374783e06572679796abe9ce9","hostname":"github.com","tags":["WEB","FIX"]},{"url":"https://github.com/advisories/GHSA-xfhp-jf8p-mh5w","label":"github.com/advisories/GHSA-xfhp-jf8p-mh5w","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6257","label":"www.suse.com/security/cve/CVE-2024-6257","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:0268-1","OPENSUSE-SU-2024:0269-1"],"duplicates":[],"related":["CGA-22M6-C957-GM9J","CGA-2H9P-9X34-5864","CGA-2RF9-X5M2-8CMG","CGA-2X8C-J6QQ-9CH3","CGA-4PCX-4JFH-74CX","CGA-7FRC-59MG-633V","CGA-7GW8-4CW9-2FP5","CGA-7RQ5-JPH4-8HG2","CGA-9J65-GR8F-F2GM","CGA-FJ5P-RF33-FQHF","CGA-G2GW-MH57-3GFM","CGA-G8HG-7GX4-5CCF","CGA-GFPC-W452-J2H8","CGA-GRWC-XWH5-VFHW","CGA-H4R2-9H96-M8C3","CGA-HF37-MXJW-6V76","CGA-P3JV-W75P-9X47","CGA-P58V-7JGP-WXGQ","CGA-RR8V-2X66-39G9","CGA-V8XV-X639-QMVW","CGA-WW4F-Q98M-79V5","CGA-X3MP-JP2J-7H65","OPENSUSE-SU-2024:0268-1","OPENSUSE-SU-2024:0269-1"]},"timeline":[{"kind":"published","date":"2024-06-25T16:31:03.882Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-01T21:33:05.245Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T12:47:29.655Z","stale":false,"partial":false}}