1393 matches found
BIT-CONSUL-2026-15970 L7 intention authorization bypass via custom public listener
Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypass when a service proxy is configured with a custom public listener. An authenticated mesh workload may reach HTTP paths that are blocked by a path-based deny intention. This...
GO-2025-4082 vulnerabilities
Vulnerabilities for packages: consul-fips, consul...
GO-2025-4081 vulnerabilities
Vulnerabilities for packages: consul-fips, consul...
GO-2024-3242 vulnerabilities
Vulnerabilities for packages: consul-fips, consul...
GO-2024-3243 vulnerabilities
Vulnerabilities for packages: consul-fips, consul...
GO-2024-3241 vulnerabilities
Vulnerabilities for packages: consul-fips, consul...
GO-2025-3802 vulnerabilities
Vulnerabilities for packages: flux-source-controller-fips, rancher-helm, zot, flux, tw, eksctl, trivy-operator-fips, cerbos, k8ssandra-client-fips, kots, cilium-cli, consul-k8s-fips, flux-source-controller, envoy-gateway-fips, pluto, trivy-fips, helm-docs, cert-manager-cmctl-fips, helm-operator,...
GO-2025-3887 vulnerabilities
Vulnerabilities for packages: flux-source-controller-fips, zot, flux, tw, eksctl, trivy-operator-fips, cerbos, k8ssandra-client-fips, trivy-operator, kots, cilium-cli, consul-k8s-fips, flux-source-controller, envoy-gateway-fips, kubescape, helm-mapkubeapis, headlamp-fips, pluto, pluto-fips,...
GO-2025-3602 vulnerabilities
Vulnerabilities for packages: flux-source-controller-fips, rancher-helm, zot, flux, tw, eksctl, k8ssandra-client-fips, kots, cilium-cli, consul-k8s-fips, flux-source-controller, kubescape, pluto, trivy-fips, helm-docs, cert-manager-cmctl-fips, helm-operator, k8ssandra-client,...
GO-2026-5435 vulnerabilities
Vulnerabilities for packages: flux-source-controller-fips, helm, kubescape-server-fips, zot, cloudbeat-fips, cloudbeat, flux, tigera-operator, tw, eksctl, trivy-operator-fips, cerbos, k8ssandra-client-fips, trivy-operator, k9s, kots, cilium-cli, consul-k8s-fips, helm-exporter-fips,...
GO-2025-3601 vulnerabilities
Vulnerabilities for packages: flux-source-controller-fips, rancher-helm, zot, flux, tw, eksctl, k8ssandra-client-fips, kots, cilium-cli, consul-k8s-fips, flux-source-controller, kubescape, pluto, trivy-fips, helm-docs, cert-manager-cmctl-fips, helm-operator, k8ssandra-client,...
GO-2025-4116 vulnerabilities
Vulnerabilities for packages: cert-manager-fips, consul-k8s, terraform, vault, falco-no-driver, gitlab-rails-ce, etcd-fips, rke2-runtime-fips, etcd, gitlab-rails-ce-fips, kube-conformance, backup-restore-operator, k3s...
GO-2026-4923 vulnerabilities
Vulnerabilities for packages: loki, zot, vault, kine, commercial-expanso-edge, grafana, rke2-runtime-fips, beats, commercial-grafana, beats-fips, k3s, elastic-agent-fips, datadog-agent, datadog-agent-fips, mattermost, rke2-runtime, frankenphp-8.4, grafana-fips, frankenphp-8.3, consul, containerd,...
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: tigera-operator, kots, xeol, tigera-operator-fips, maru, trivy-fips, drone, kube-arangodb, helm-set-status, cert-manager-cmctl-fips, helm-exporter, cluster-api-helm-controller, k9s-fips, zarf, cert-manager-cmctl, gitlab-operator, teleport, trivy, chartmuseum-fips,...
GO-2026-5880 vulnerabilities
Vulnerabilities for packages: zot, tigera-operator, kots, opa-envoy, xeol, tigera-operator-fips, trivy-fips, drone, kube-arangodb, helm-set-status, cert-manager-cmctl-fips, helm-exporter, cluster-api-helm-controller, k9s-fips, zarf, cert-manager-cmctl, gitlab-operator, teleport, trivy,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: argo-cd, actions-runner-controller, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-memorydb, atlantis, gitlab-pages, kubo, rabbitmq-cluster-operator, docker-cli-buildx, redpanda, consul-k8s, kaniko, buildah, falco-no-driver, sftpgo-plugin-geoipfilter,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: rabbitmq-cluster-operator, docker-cli-buildx, fzf, rancher-system-upgrade-controller, wal-g, mongo-tools, libnvidia-container, headlamp, mockgen, cilium-cli, ipfs-cluster, cis-operator, nri-mysql, aactl, gobuster, gobump, step-kms-plugin, lazydocker,...
CVE-2026-19113 vulnerabilities
Vulnerabilities for packages: consul-fips, consul...