1226 matches found
HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery
HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11 are susceptible to server-side request forgery. When redirects are returned by HTTP health check endpoints, Consul follows these HTTP redirects by default. An attacker can possibly obtain sensitive information, modify data,...
HashiCorp Consul/Consul Enterprise <=1.9.4 - Cross-Site Scripting
HashiCorp Consul and Consul Enterprise up to version 1.9.4 are vulnerable to cross-site scripting via the key-value KV raw mode. id: CVE-2020-25864 info: name: HashiCorp Consul/Consul Enterprise =1.9.4 - Cross-Site Scripting author: c-sh0 severity: medium description: | HashiCorp Consul and Consu...
BIT-CONSUL-2026-19113 Unauthenticated denial of service via unbounded request body processing
Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability, CVE-2026-19113, i...
BIT-CONSUL-2026-19017 Consul vulnerable to partial arbitrary file read via Vault Connect CA provider
Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read when configured to use the Vault Connect CA provider with JWT or AppRole authentication. A privileged attacker with operator:write permission may direct Consul to read and forward...
BIT-CONSUL-2026-19016 Authorization bypass for session deletion in the transaction API
Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the session:write ACL permission for session deletion operations submitted through the transaction API. An authenticated caller with network access to the Consul server RPC port could delete arbitrary sessions...
BIT-CONSUL-2026-19015 Uncontrolled resource consumption in the Consul Connect CA roots endpoint
Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect CA roots endpoint that may allow a remote caller to grow the agent's Connect CA roots cache without bound, defeating the operator's cache-disable...
BIT-CONSUL-2026-19014 Uncontrolled resource consumption in the Consul Connect authorization endpoint
Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization endpoint that may allow a caller to grow the agent's intention-match cache without bound, defeating the operator's cache-disable...
BIT-CONSUL-2026-19012 Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path
Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service in the Enterprise-to-Community Edition downgrade path that may allow an authorized caller to crash the Consul server. A caller with config-entry write permission can submit a...
BIT-CONSUL-2026-16328 consul-mcp-server vulnerable to server side request forgery leading to token exposure
In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address was supplied, allowing a connected client to override the server's configured Consul address via a request header. This may allow a malicious client to redirect the server's Consul API traffic to an...
BIT-CONSUL-2026-15972 Unauthenticated denial of service via unbounded external gRPC connection acceptance
Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of service through unbounded connection acceptance on the external gRPC listeners. A remote attacker may exhaust agent file descriptors, goroutines, and memory by opening many incomplet...
BIT-CONSUL-2026-15970 L7 intention authorization bypass via custom public listener
Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypass when a service proxy is configured with a custom public listener. An authenticated mesh workload may reach HTTP paths that are blocked by a path-based deny intention. This...
GO-2025-4082 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
GO-2025-4081 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
GO-2024-3242 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
GO-2024-3243 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
GO-2024-3241 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
GO-2025-3802 vulnerabilities
Vulnerabilities for packages: flux-fips, chartmuseum, helm-operator, flux-helm-controller, eksctl, flux-helm-controller-fips, consul-k8s, envoy-gateway, cerbos, tw, kuma, harbor-fips, k8ssandra-client, kargo, kots, trivy, zot, flux, trivy-fips, chart-testing-fips, cerbos-fips, istio, pluto,...
GO-2025-3887 vulnerabilities
Vulnerabilities for packages: flux-fips, chartmuseum, helm-operator, flux-helm-controller, eksctl, flux-helm-controller-fips, consul-k8s, envoy-gateway, cerbos, tw, kuma, harbor-fips, k8ssandra-client, kargo, kots, trivy, zot, flux, k9s-fips, trivy-fips, helm-set-status, chart-testing-fips,...
GO-2025-3602 vulnerabilities
Vulnerabilities for packages: flux-fips, chartmuseum, helm-operator, flux-helm-controller, eksctl, flux-helm-controller-fips, consul-k8s, tw, kuma, harbor-fips, k8ssandra-client, trivy, kots, zot, flux, trivy-fips, chart-testing-fips, rancher-helm, pluto, kubescape, chartmuseum-fips, k9s,...
GO-2026-5435 vulnerabilities
Vulnerabilities for packages: flux-fips, cloudbeat, chaos-mesh, chartmuseum, gitlab-operator-fips, helm-operator, trivy-fips, kube-arangodb-fips, eksctl, kube-arangodb, helm-exporter, consul-k8s, envoy-gateway, cerbos, zarf-fips, tw, kuma, tigera-operator-fips, harbor-fips, cloudbeat-fips,...