What’s Vulnerable › Products

HashiCorp go-slug vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your HashiCorp go-slug version is affected

Latest HashiCorp go-slug vulnerabilities

• CVE-2026-14978 — Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions (CVSS 5.5)
• CVE-2025-0377 — HashiCorp go-slug Vulnerable to Zip Slip Attack (CVSS 9.1)
• CVE-2020-29529 — (CVSS 7.5)