Is github-com/hashicorp/go-getter safe?
As of 2026-11-14, CyberXYZ has no known vulnerabilities or malicious-package signals recorded for github-com/hashicorp/go-getter (go). That describes what is recorded, not a guarantee about future releases.
76 direct dependencies
17 carry known advisories, worst CRITICAL
122 packages depend on it
an advisory here reaches each of them
Tracked for PyPI packages. HuggingFace models declare Python dependencies, so go packages are not covered.
Is github-com/hashicorp/go-getter safe to install?
As of 2026-11-14, CyberXYZ has no known vulnerabilities or malicious-package signals recorded for github-com/hashicorp/go-getter (go). That is a statement about the record, not a guarantee, so check the exact version you install.
Does github-com/hashicorp/go-getter have known vulnerabilities?
No known vulnerabilities are recorded for github-com/hashicorp/go-getter (go) as of 2026-11-14.
How do I check github-com/hashicorp/go-getter before installing?
Search github-com/hashicorp/go-getter in CyberXYZ Check at https://cyberxyz.io/check?q=github-com%2Fhashicorp%2Fgo-getter. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-14 at 13:14 UTC. Updated continuously from NVD, GHSA, OSV and CNA feeds.