The vulnerability of the Consul and Consul Enterprise service configuration tool, which involves unlimited distribution of resources, allows a perpetrator to cause service failures.

The vulnerability of the Consul and Consul Enterprise service configuration tools is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: promxy, kubeflow-katib, runc, kube-bench, nvidia-container-toolkit, terraform-provider-time, pgtimetable, opensearch-k8s-operator, temporal-server, rancher-loglevel, splunk-otel-collector, mockery, prometheus-adapter, pulumi-kubernetes-operator, gitness,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: promxy, kubeflow-katib, runc, kube-bench, nvidia-container-toolkit, terraform-provider-time, pgtimetable, opensearch-k8s-operator, temporal-server, rancher-loglevel, splunk-otel-collector, mockery, prometheus-adapter, pulumi-kubernetes-operator, gitness,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter-fips, aws-flb-cloudwatch-fips, cue-fips, kpt, kiali-fips, gitlab-workhorse-ce-fips, monstache, opa, gitea, fluxcd-kustomize-mutating-webhook-fips, chisel, cloudnative-pg-fips, helm-operator-fips, supercronic, nfpm, go-discover,...

ROS-20251203-16

A vulnerability in the Consul and Consul Enterprise service configuration tool is related to incorrect validation of the Content Length of the Content Length header. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service Vulnerability in the Consul an...

Security Bulletin: Consul’s KV endpoint is vulnerable to denial of service

Summary Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

Security Bulletin:Consul’s event endpoint is vulnerable to denial of service

Summary Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial of service DoS due to lack of maximum value on the Content Length header. Vulnerability Details CVEID: CVE-2025-11375 DESCRIPTION: Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial ...

BIT-CONSUL-2025-11375 Consul's event endpoint is vulnerable to denial of service

Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial of service DoS due to lack of maximum value on the Content Length header. This vulnerability, CVE-2025-11375, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

BIT-CONSUL-2025-11374 Consul's KV endpoint is vulnerable to denial of service

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

GO-2025-4082 Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul

Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul...

GO-2025-4081 Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul

Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul...

PT-2025-45879

Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul...

PT-2025-45880

Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul...

CVE-2025-11374 vulnerabilities

Vulnerabilities for packages: consul-fips, consul...

GHSA-7G3R-8C6V-HFMR vulnerabilities

Vulnerabilities for packages: consul-fips, consul...

GHSA-QH7P-PFQ3-677H vulnerabilities

Vulnerabilities for packages: consul-fips, consul...

CVE-2025-11375 vulnerabilities

Vulnerabilities for packages: consul-fips, consul...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: controller-gen, kubernetes-event-exporter-fips, step-kms-plugin, prometheus-elasticsearch-exporter, kubecolor, google-osconfig-agent, capslock, kpt, kyverno, node-problem-detector, skopeo-fips, configmap-reload, modelmesh-runtime-adapter, mods, karpenter-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: controller-gen, kubernetes-event-exporter-fips, step-kms-plugin, prometheus-elasticsearch-exporter, kubecolor, google-osconfig-agent, capslock, kpt, kyverno, node-problem-detector, skopeo-fips, configmap-reload, modelmesh-runtime-adapter, mods, karpenter-fips,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: controller-gen, kubernetes-event-exporter-fips, step-kms-plugin, prometheus-elasticsearch-exporter, kubecolor, google-osconfig-agent, capslock, kpt, kyverno, node-problem-detector, skopeo-fips, configmap-reload, modelmesh-runtime-adapter, mods, karpenter-fips,...