[github.com/hashicorp/go-getter] Unsafe downloads in HashiCorp go-getter

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Asymmetric resource exhaustion could occur when go-getter processed malicious HTTP responses.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-30323
• https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930
• https://github.com/advisories/GHSA-28r2-q6m8-9hpx