1393 matches found
BIT-CONSUL-2026-15970 L7 intention authorization bypass via custom public listener
Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypass when a service proxy is configured with a custom public listener. An authenticated mesh workload may reach HTTP paths that are blocked by a path-based deny intention. This...
GO-2025-4081 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
GO-2025-4082 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
GO-2024-3242 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
GO-2024-3243 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
GO-2024-3241 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
GO-2025-3802 vulnerabilities
Vulnerabilities for packages: flux-source-controller, helm-push, k8ssandra-client-fips, cluster-api-helm-controller, cert-manager-cmctl-fips, chart-testing-fips, flux-helm-controller-fips, rancher-helm, trivy-operator-fips, kuma, trivy, zarf, cert-manager-cmctl, kargo, pluto, consul-k8s, flux-fip...
GO-2025-3887 vulnerabilities
Vulnerabilities for packages: trivy-operator, flux-source-controller, helm-push, k8ssandra-client-fips, helm-mapkubeapis, k9s-fips, cluster-api-helm-controller, cert-manager-cmctl-fips, chart-testing-fips, cluster-api-helm-controller-fips, flux-helm-controller-fips, headlamp-fips, nova-fips,...
GO-2025-3602 vulnerabilities
Vulnerabilities for packages: flux-source-controller, helm-push, k8ssandra-client-fips, cluster-api-helm-controller, cert-manager-cmctl-fips, chart-testing-fips, cluster-api-helm-controller-fips, flux-helm-controller-fips, rancher-helm, kuma, trivy, zarf, cert-manager-cmctl, pluto, consul-k8s,...
GO-2026-5435 vulnerabilities
Vulnerabilities for packages: jfrog-cli, kubescape-server, flux-source-controller, helm-exporter, helm-push, trivy-operator, k8ssandra-client-fips, kube-arangodb, helm-mapkubeapis, k9s-fips, cluster-api-helm-controller, cert-manager-cmctl-fips, chart-testing-fips, cluster-api-helm-controller-fips...
GO-2025-3601 vulnerabilities
Vulnerabilities for packages: flux-source-controller, helm-push, k8ssandra-client-fips, cluster-api-helm-controller, cert-manager-cmctl-fips, chart-testing-fips, cluster-api-helm-controller-fips, flux-helm-controller-fips, rancher-helm, kuma, trivy, zarf, cert-manager-cmctl, pluto, consul-k8s,...
GO-2025-4116 vulnerabilities
Vulnerabilities for packages: vault, cert-manager-fips, rke2-runtime-fips, gitlab-rails-ce-fips, terraform, gitlab-rails-ce, k3s, kube-conformance, falco-no-driver, consul-k8s, etcd-fips, etcd, backup-restore-operator...
GO-2026-4923 vulnerabilities
Vulnerabilities for packages: grafana, vault, containerd, mattermost, beats, commercial-expanso-edge, frankenphp-8.5, elastic-agent, consul, datadog-agent-fips, fuse-overlayfs-snapshotter, loki, rke2-runtime, grafana-fips, zot, mattermost-fips, frankenphp-8.4, rke2-runtime-fips, frankenphp-8.3,...
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: oras-fips, trivy-operator, helm-exporter, drone, kyverno-fips, xeol-fips, kgateway, cert-manager-cmctl-fips, kyverno-notation-aws, crossplane, commercial-kyverno, headlamp-fips, falcoctl, falcoctl-fips, helm-exporter-fips, kubescape-server-fips, k9s, argo-cd-fips,...
GO-2026-5880 vulnerabilities
Vulnerabilities for packages: oras-fips, trivy-operator, flux-source-controller, helm-exporter, drone, kyverno-fips, xeol-fips, opa-fips-envoy, kgateway, cert-manager-cmctl-fips, kyverno-notation-aws, crossplane, commercial-kyverno, headlamp-fips, grafana-operator-fips, falcoctl,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: tigera-operator, kubernetes-event-exporter, cloudnative-pg, govulncheck, kubeflow-katib, pulumi-kubernetes-operator, crossplane-provider-aws-cloudfront, octo-sts, grafana-alloy, cloud-provider-aws, skopeo, rancher-webhook, kubernetes-csi-livenessprobe, kuma,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-driver-nfs, falcoctl, kubeflow-katib, cni-plugins, grafana-alloy, amazon-cloudwatch-agent-operator, kyverno-notation-aws, nginx-prometheus-exporter, libnvidia-container, k8sgpt, undock, yunikorn-k8shim, kuberlr, aws-application-networking-k8s,...
CVE-2026-19014 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...