CVE-2026-14361

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in consul-templat...

CVE-2026-14361

The CVE-2026-14361 issue affects consul-template prior to 0.42.1, where the writeToFile helper opens the destination path directly and follows links in the path. This can allow template output to be written outside the intended directory or overwrite an existing file. The root cause is path redir...

EUVD-2026-42346

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in consul-templat...

CVE-2026-14361 Consul-template is vulnerable to path redirection in writeToFile through symlink attack

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in consul-templat...

CVE-2026-14361 Consul-template is vulnerable to path redirection in writeToFile through symlink attack

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in consul-templat...

Consul-template vulnerable to path redirections in writeToFile

Summary The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, ratify, chaos-mesh-fips, k9s, helm-operator, linkerd2, opentofu, kube-arangodb-fips, zarf, conftest, chartmuseum, consul-k8s, xeol, helm-exporter, eksctl, kyverno-fips, helm-set-status, trivy-operator, kube-mgmt-fips, helm-mapkubeapis,...

GHSA-8XWF-RJM4-XVHV vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, ratify, chaos-mesh-fips, k9s, helm-operator, linkerd2, opentofu, kube-arangodb-fips, zarf, conftest, chartmuseum, consul-k8s, xeol, helm-exporter, eksctl, kyverno-fips, helm-set-status, trivy-operator, kube-mgmt-fips, helm-mapkubeapis,...

CVE-2026-50162 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, ratify, chaos-mesh-fips, k9s, helm-operator, linkerd2, opentofu, kube-arangodb-fips, zarf, conftest, chartmuseum, consul-k8s, xeol, helm-exporter, eksctl, kyverno-fips, helm-set-status, trivy-operator, kube-mgmt-fips, helm-mapkubeapis,...

GHSA-XF85-363P-868W vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, ratify, chaos-mesh-fips, k9s, helm-operator, linkerd2, opentofu, kube-arangodb-fips, zarf, conftest, chartmuseum, consul-k8s, xeol, helm-exporter, eksctl, kyverno-fips, helm-set-status, trivy-operator, kube-mgmt-fips, helm-mapkubeapis,...

GHSA-VH4V-2XQ2-G5CG vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, ratify, chaos-mesh-fips, k9s, helm-operator, linkerd2, opentofu, kube-arangodb-fips, zarf, conftest, chartmuseum, consul-k8s, xeol, helm-exporter, eksctl, kyverno-fips, helm-set-status, trivy-operator, kube-mgmt-fips, helm-mapkubeapis,...

GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, ratify, chaos-mesh-fips, k9s, helm-operator, linkerd2, opentofu, kube-arangodb-fips, zarf, conftest, chartmuseum, consul-k8s, xeol, helm-exporter, eksctl, kyverno-fips, helm-set-status, trivy-operator, kube-mgmt-fips, helm-mapkubeapis,...

CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, ratify, chaos-mesh-fips, k9s, helm-operator, linkerd2, opentofu, kube-arangodb-fips, zarf, conftest, chartmuseum, consul-k8s, xeol, helm-exporter, eksctl, kyverno-fips, helm-set-status, trivy-operator, kube-mgmt-fips, helm-mapkubeapis,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller-fips, neuvector-sigstore-interface, crossplane-provider-aws-secretsmanager, crossplane-provider-aws-datasync-fips, kubernetes, kyverno-policy-reporter-plugins-kyverno, crossplane-provider-aws-directconnect-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller-fips, neuvector-sigstore-interface, crossplane-provider-aws-secretsmanager, crossplane-provider-aws-datasync-fips, kubernetes, kyverno-policy-reporter-plugins-kyverno, crossplane-provider-aws-directconnect-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller-fips, gcp-compute-persistent-disk-csi-driver, stunnerd, crossplane-provider-gcp-beta-networksecurity, neuvector-sigstore-interface, kube-metrics-adapter-fips, authentik-fips, crossplane-provider-aws-secretsmanager, kubernetes,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller-fips, gcp-compute-persistent-disk-csi-driver, stunnerd, crossplane-provider-gcp-beta-networksecurity, neuvector-sigstore-interface, kube-metrics-adapter-fips, authentik-fips, crossplane-provider-aws-secretsmanager, kubernetes,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: datadog-agent, wal-g, kubescape, splunk-otel-collector, bento, vcluster, migrate, teleport, loki, ksops, weaviate, terraform-provider-pagerduty, amazon-cloudwatch-agent, dapr, external-secrets-operator, thanos, opentelemetry-collector-contrib, kubescape-operator,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: datadog-agent, wal-g, kubescape, splunk-otel-collector, bento, vcluster, migrate, teleport, loki, ksops, weaviate, terraform-provider-pagerduty, amazon-cloudwatch-agent, dapr, external-secrets-operator, thanos, opentelemetry-collector-contrib, kubescape-operator,...

CVE-2026-5061

The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerability CVE-2026-5061 is fixed in consul-template 0.42.0...