1549 matches found
CLEANSTART-2026-EL11449 Security fix for GHSA-j5w8-q4qc-rx2x applied in: consul 1.21.5-r0
Security vulnerability affects the consul package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-YM37209 Security fix for GHSA-4f99-4q7p-p3gh applied in: consul 1.20.6-r0, consul 1.21.5-r0
GHSA-4f99-4q7p-p3gh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-RW00799 Security fix for GHSA-f6x5-jh6r-wrfv applied in: consul 1.21.5-r0
Security vulnerability affects the consul package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-ZL19560 Security fix for GHSA-9h8m-3fm2-qjrq applied in: consul 1.21.5-r0
Security vulnerability affects the consul package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-MP17411 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...
Security vulnerability affects the consul package. Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...
CLEANSTART-2026-JS43220 Security fix for GHSA-78h2-9frx-2jm8 applied in: consul 1.21.5-r1
Security vulnerability affects the consul package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-CF84977 Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh
Security vulnerability affects the consul package. The Verify method for FIDO/U2F security key types sk-ecdsa-sha2-nistp256@openssh...
CLEANSTART-2026-MV50731 When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty pa...
Security vulnerability affects the consul package. When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress...
CLEANSTART-2026-IF71348 When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh
Security vulnerability affects the consul package. When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh...
CLEANSTART-2026-MD19554 in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it
Security vulnerability affects the consul package. The in-memory keyring returned by NewKeyring silently accepted keys with the ConfirmBeforeUse constraint but never enforced it...
CLEANSTART-2026-NG02064 RSA and DSA public key parsers did not enforce size limits on key parameters
Security vulnerability affects the consul package. The RSA and DSA public key parsers did not enforce size limits on key parameters...
CLEANSTART-2026-DB84744 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs
Security vulnerability affects the consul package. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
CLEANSTART-2026-HZ65290 Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum value on the Content Length header
Security vulnerability affects the consul package. Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial of service DoS due to lack of maximum value on the Content Length header...
CLEANSTART-2026-RI83970 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
Security vulnerability affects the consul package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
CLEANSTART-2026-LZ15854 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
Security vulnerability affects the consul package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
CLEANSTART-2026-CT85138 SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate
Security vulnerability affects the consul package. SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate...
CLEANSTART-2026-TS90060 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service
Security vulnerability affects the consul package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
CLEANSTART-2026-BX44757 For certain crafted inputs, a 'ed25519
Security vulnerability affects the consul package. For certain crafted inputs, a 'ed25519...
CLEANSTART-2026-LK92318 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
Security vulnerability affects the consul package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
CLEANSTART-2026-YZ71204 authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users
Security vulnerability affects the consul package. An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users...