CVE-2026-14361 Consul-template is vulnerable to path redirection in writeToFile through symlink attack

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in consul-templat...

CVE-2026-14361

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in consul-templat...

CVE-2026-14361

The CVE-2026-14361 issue affects consul-template prior to 0.42.1, where the writeToFile helper opens the destination path directly and follows links in the path. This can allow template output to be written outside the intended directory or overwrite an existing file. The root cause is path redir...

CVE-2026-14361 Consul-template is vulnerable to path redirection in writeToFile through symlink attack

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in consul-templat...

Consul-template vulnerable to path redirections in writeToFile

Summary The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in...

PT-2026-56555

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in consul-templat...

CVE-2026-14361: Improper Link Resolution Before File Access

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in consul-templat...

The vulnerability of the ConsulRegistryUtils.deserialize method in the ConsulRegistry class of the Java framework Apache Camel allows a attacker to execute arbitrary code.

The vulnerability of the ConsulRegistryUtils.deserialize method in the ConsulRegistry class of the Java framework Apache Camel is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

Exploit for Deserialization of Untrusted Data in Apache Camel

camel-consul ConsulRegistry Deserialization Vulnerability Repr...

CVE-2026-50162 vulnerabilities

Vulnerabilities for packages: ocm-cli, trivy-operator, vcluster-fips, drone-fips, helm-operator, helm-push, rancher-agent, xeol, zarf-fips, crossplane, manifest-tool, cluster-api-helm-controller, cert-manager-cmctl-fips, tigera-operator, eksctl, ocm-kubernetes-controller, envoy-gateway-fips,...

GHSA-8XWF-RJM4-XVHV vulnerabilities

Vulnerabilities for packages: ocm-cli, trivy-operator, vcluster-fips, drone-fips, helm-operator, helm-push, rancher-agent, xeol, zarf-fips, crossplane, manifest-tool, cluster-api-helm-controller, cert-manager-cmctl-fips, tigera-operator, eksctl, ocm-kubernetes-controller, envoy-gateway-fips,...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips, ocm-cli, trivy-operator, vcluster-fips, drone-fips, helm-operator, helm-push, rancher-agent, xeol, zarf-fips, crossplane, manifest-tool, cluster-api-helm-controller, cert-manager-cmctl-fips, tigera-operator, eksctl, ocm-kubernetes-controlle...

GHSA-VH4V-2XQ2-G5CG vulnerabilities

Vulnerabilities for packages: ocm-cli, trivy-operator, vcluster-fips, drone-fips, helm-operator, helm-push, rancher-agent, xeol, zarf-fips, crossplane, manifest-tool, cluster-api-helm-controller, cert-manager-cmctl-fips, tigera-operator, eksctl, ocm-kubernetes-controller, envoy-gateway-fips,...

GHSA-XF85-363P-868W vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips, ocm-cli, trivy-operator, vcluster-fips, drone-fips, helm-operator, helm-push, rancher-agent, xeol, zarf-fips, crossplane, manifest-tool, cluster-api-helm-controller, cert-manager-cmctl-fips, tigera-operator, eksctl, ocm-kubernetes-controlle...

CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: ocm-cli, trivy-operator, vcluster-fips, drone-fips, helm-operator, helm-push, rancher-agent, xeol, zarf-fips, crossplane, manifest-tool, cluster-api-helm-controller, cert-manager-cmctl-fips, tigera-operator, eksctl, ocm-kubernetes-controller, envoy-gateway-fips,...

GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: ocm-cli, trivy-operator, vcluster-fips, drone-fips, helm-operator, helm-push, rancher-agent, xeol, zarf-fips, crossplane, manifest-tool, cluster-api-helm-controller, cert-manager-cmctl-fips, tigera-operator, eksctl, ocm-kubernetes-controller, envoy-gateway-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: kueue, crossplane-aws-provider, crossplane-provider-aws-sqs, crossplane-provider-aws-ecs-fips, crossplane-provider-aws-osis, crossplane-provider-aws-networkmanager, crossplane-provider-aws-elasticache-fips, buildkitd, crossplane-provider-aws-iam,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: kueue, crossplane-aws-provider, crossplane-provider-aws-sqs, crossplane-provider-aws-ecs-fips, crossplane-provider-aws-osis, crossplane-provider-aws-networkmanager, crossplane-provider-aws-elasticache-fips, buildkitd, crossplane-provider-aws-iam,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: kueue, kubeflow-pipelines-fips, kong-ingress-controller, promxy, image-factory-fips, containerd-fips, dagdotdev, kubernetes-csi-external-resizer-fips, trufflehog, seaweedfs-operator, crossplane-provider-aws-ecs-fips, kserve-fips, plugin-barman-cloud-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: kueue, kubeflow-pipelines-fips, kong-ingress-controller, promxy, image-factory-fips, containerd-fips, dagdotdev, kubernetes-csi-external-resizer-fips, trufflehog, seaweedfs-operator, crossplane-provider-aws-ecs-fips, kserve-fips, plugin-barman-cloud-fips,...