CVE-2023-0475 (published 2023-02-16T18:35:37.518Z)
HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0.
Affected products: Vendor: HashiCorp
Product: go-getter
Versions: 0, 0