github.com/hashicorp/consul vulnerabilities (Go)

32 vulnerabilities.

• github.com/hashicorp/consul Go Consul vulnerable to arbitrary file reads through the vault kubernetes authentication provider CVE-2026-2808 Fix available 6.8 MediumMarch 11, 2026
• github.com/hashicorp/consul Go Consul's KV endpoint is vulnerable to denial of service CVE-2025-11374 Fix available 6.5 MediumOctober 28, 2025
• github.com/hashicorp/consul Go Consul's event endpoint is vulnerable to denial of service CVE-2025-11375 Fix available 6.5 MediumOctober 28, 2025
• github.com/hashicorp/consul Go Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation CVE-2024-10086 Fix available 6.1 MediumOctober 30, 2024
• github.com/hashicorp/consul Go Consul L7 Intentions Vulnerable To Headers Bypass CVE-2024-10006 Fix available 8.3 HighOctober 30, 2024
• github.com/hashicorp/consul Go Consul L7 Intentions Vulnerable To URL Path Bypass CVE-2024-10005 Public exploitFix available 8.1 HighOctober 30, 2024
• github.com/hashicorp/consul Go JWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for Access CVE-2023-3518 Fix available 7.4 HighAugust 9, 2023
• github.com/hashicorp/consul Go Consul Cluster Peering can Result in Denial of Service CVE-2023-1297 Fix available 4.9 MediumJune 2, 2023
• github.com/hashicorp/consul Go Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner CVE-2023-2816 Fix available 8.7 HighJune 2, 2023
• github.com/hashicorp/consul Go Consul Server Panic when Ingress and API Gateways Configured with Peering CVE-2023-0845 Fix available 4.9 MediumMarch 9, 2023
• github.com/hashicorp/consul Go Consul Peering Imported Nodes/Services Leak CVE-2022-3920 Fix available 5.3 MediumNovember 15, 2022
• github.com/hashicorp/consul Go HashiCorp Consul vulnerable to authorization bypass CVE-2022-40716 Fix available 6.5 MediumSeptember 23, 2022
• github.com/hashicorp/consul Go HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions CVE-2021-41803 Fix available 7.1 HighSeptember 23, 2022
• github.com/hashicorp/consul Go Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector CVE-2022-29153 Fix available 7.5 HighApril 19, 2022
• github.com/hashicorp/consul Go HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers CVE-2022-24687 Fix available 6.5 MediumFebruary 24, 2022
• github.com/hashicorp/consul Go HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. CVE-2021-38698 Fix available 6.5 MediumSeptember 7, 2021
• github.com/hashicorp/consul Go HashiCorp Consul Privilege Escalation Vulnerability CVE-2021-37219 Fix available 8.8 HighSeptember 7, 2021
• github.com/hashicorp/consul Go HashiCorp Consul L7 deny intention results in an allow action CVE-2021-36213 Fix available 7.5 HighJuly 17, 2021
• github.com/hashicorp/consul Go Hashicorp Consul Missing SSL Certificate Validation CVE-2021-32574 Fix available 7.5 HighJuly 17, 2021
• github.com/hashicorp/consul Go HashiCorp Consul Cross-site Scripting vulnerability CVE-2020-25864 Fix available 6.1 MediumApril 20, 2021
• github.com/hashicorp/consul Go Privilege Escalation in HashiCorp Consul CVE-2020-28053 Fix available 6.5 MediumNovember 23, 2020
• github.com/hashicorp/consul Go Denial of service in HashiCorp Consul CVE-2020-25201 Fix available 7.5 HighNovember 4, 2020
• github.com/hashicorp/consul Go Improper Input Validation in HashiCorp Consul CVE-2020-13170 Fix available 7.5 HighJune 11, 2020
• github.com/hashicorp/consul Go Incorrect Permission Assignment for Critical Resource in Hashicorp Consul CVE-2020-12797 Fix available 5.3 MediumJune 11, 2020
• github.com/hashicorp/consul Go Denial of Service (DoS) in HashiCorp Consul CVE-2020-12758 Fix available 7.5 HighJune 11, 2020
• github.com/hashicorp/consul Go Allocation of Resources Without Limits or Throttling in Hashicorp Consul CVE-2020-13250 Fix available 7.5 HighJune 11, 2020
• github.com/hashicorp/consul Go Denial of Service (DoS) in HashiCorp Consul CVE-2020-7219 Fix available 7.5 HighJanuary 31, 2020
• github.com/hashicorp/consul Go Incorrect Authorization in HashiCorp Consul CVE-2020-7955 Fix available 5.3 MediumJanuary 31, 2020
• github.com/hashicorp/consul Go HashiCorp Consul Incorrect Access Control vulnerability CVE-2019-12291 Fix available 7.5 HighJune 6, 2019
• github.com/hashicorp/consul Go HashiCorp Consul vulnerable to Origin Validation Error CVE-2019-9764 Fix available 7.4 HighMarch 26, 2019
• github.com/hashicorp/consul Go HashiCorp Consul Access Restriction Bypass CVE-2019-8336 Fix available 8.1 HighMarch 5, 2019
• github.com/hashicorp/consul Go HashiCorp Consul can use cleartext agent-to-agent RPC communication CVE-2018-19653 Fix available 5.9 MediumDecember 9, 2018