1483 matches found
CVE-2026-19015: Allocation of Resources Without Limits or Throttling
Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect CA roots endpoint that may allow a remote caller to grow the agent's Connect CA roots cache without bound, defeating the operator's cache-disable...
CVE-2026-19014: Allocation of Resources Without Limits or Throttling
Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization endpoint that may allow a caller to grow the agent's intention-match cache without bound, defeating the operator's cache-disable...
CVE-2026-19012: NULL Pointer Dereference
Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service in the Enterprise-to-Community Edition downgrade path that may allow an authorized caller to crash the Consul server. A caller with config-entry write permission can submit a...
CVE-2026-15972: Allocation of Resources Without Limits or Throttling
Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of service through unbounded connection acceptance on the external gRPC listeners. A remote attacker may exhaust agent file descriptors, goroutines, and memory by opening many incomplet...
CVE-2026-15970: Use of Non-Canonical URL Paths for Authorization Decisions
Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypass when a service proxy is configured with a custom public listener. An authenticated mesh workload may reach HTTP paths that are blocked by a path-based deny intention. This...
HashiCorp Consul Template 0.41.4 Sandbox Path Bypass / Information Disclosure
This repository includes details for a HashiCorp Consul Template version 0.41.4 sandbox path bypass information disclosure vulnerability. HashiCorp Consul Template versions 0.41.4 and earlier contain a time-of-check to time-of-use flaw in the file template helper where symlink validation is...
HashiCorp Consul Template 0.42.0 Path Redirection File Overwrite / Information Disclosure
This repository holds details relating to a HashiCorp Consul Template version 0.42.0 path redirection file overwrite vulnerability. HashiCorp Consul Template versions 0.42.0 and earlier contain a path resolution flaw in the writeToFile template helper where operator-supplied output paths are open...
Exploit for CVE-2026-5061
CVE-2026-5061 Consul Template validated where a symlink pointe...
Exploit for CVE-2026-14361
CVE-2026-14361 Consul Template's writeToFile helper opened an...
CLEANSTART-2026-IP63779 Security fixes in consul 1.22.7-r1
Package consul version 1.22.7-r1 fixes 24 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...
CLEANSTART-2026-RX52508 Security fixes in consul 2.0.0-r0
Package consul version 2.0.0-r0 fixes 21 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...
CLEANSTART-2026-RT21199 Security fixes in consul 1.21.5-r3
Package consul version 1.21.5-r3 fixes 19 vulnerabilities: CVE-2026-39835, CVE-2026-46598, CVE-2026-25681, CVE-2026-27136, CVE-2026-42502...
CLEANSTART-2026-WF12497 Security fixes in consul-k8s-fips 1.9.1-r2
Package consul-k8s-fips version 1.9.1-r2 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-EJ20938 Security fixes in consul 1.22.5-r1
Package consul version 1.22.5-r1 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...
CLEANSTART-2026-IR32723 Security fixes in consul-fips 1.22.2-r1
Package consul-fips version 1.22.2-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-FE95869 Security fixes in consul-k8s-fips 1.5.9-r0
Package consul-k8s-fips version 1.5.9-r0 fixes 4 vulnerabilities: CVE-2025-54410, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199...
CLEANSTART-2026-AL63069 Security fixes in consul-fips 1.22.7-r0
Package consul-fips version 1.22.7-r0 fixes 1 vulnerabilities: ghsa-mh2q-q3fh-2475...
CLEANSTART-2026-FQ15535 Security fixes in consul-k8s 1.7.13-r1
Package consul-k8s version 1.7.13-r1 fixes 2 vulnerabilities: CVE-2026-42505, CVE-2026-39822...