EUVD-2026-42346

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in consul-templat...

CVE-2026-14361 Consul-template is vulnerable to path redirection in writeToFile through symlink attack

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in consul-templat...

CVE-2026-14361 Consul-template is vulnerable to path redirection in writeToFile through symlink attack

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in consul-templat...

Consul-template vulnerable to path redirections in writeToFile

Summary The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability CVE-2026-14361 is fixed in...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, kgateway-fips, cert-manager-cmctl-fips, k9s, oras-fips, kubescape, kubescape-operator-fips, tigera-operator-fips, gitlab-operator-fips, kyverno, drone, helm-mapkubeapis, falcoctl-fips, conftest, kube-mgmt, drone-fips, oras, conftest-fips,...

GHSA-8XWF-RJM4-XVHV vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, kgateway-fips, cert-manager-cmctl-fips, k9s, oras-fips, kubescape, kubescape-operator-fips, tigera-operator-fips, gitlab-operator-fips, kyverno, drone, helm-mapkubeapis, falcoctl-fips, conftest, kube-mgmt, drone-fips, oras, conftest-fips,...

CVE-2026-50162 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, kgateway-fips, cert-manager-cmctl-fips, k9s, oras-fips, kubescape, kubescape-operator-fips, tigera-operator-fips, gitlab-operator-fips, kyverno, drone, helm-mapkubeapis, falcoctl-fips, conftest, kube-mgmt, drone-fips, oras, conftest-fips,...

GHSA-VH4V-2XQ2-G5CG vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, kgateway-fips, cert-manager-cmctl-fips, k9s, oras-fips, kubescape, kubescape-operator-fips, tigera-operator-fips, gitlab-operator-fips, kyverno, drone, helm-mapkubeapis, falcoctl-fips, conftest, kube-mgmt, drone-fips, oras, conftest-fips,...

GHSA-XF85-363P-868W vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, kgateway-fips, cert-manager-cmctl-fips, k9s, oras-fips, kubescape, kubescape-operator-fips, tigera-operator-fips, gitlab-operator-fips, kyverno, drone, helm-mapkubeapis, falcoctl-fips, conftest, kube-mgmt, drone-fips, oras, conftest-fips,...

GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, kgateway-fips, cert-manager-cmctl-fips, k9s, oras-fips, kubescape, kubescape-operator-fips, tigera-operator-fips, gitlab-operator-fips, kyverno, drone, helm-mapkubeapis, falcoctl-fips, conftest, kube-mgmt, drone-fips, oras, conftest-fips,...

CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, kgateway-fips, cert-manager-cmctl-fips, k9s, oras-fips, kubescape, kubescape-operator-fips, tigera-operator-fips, gitlab-operator-fips, kyverno, drone, helm-mapkubeapis, falcoctl-fips, conftest, kube-mgmt, drone-fips, oras, conftest-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: frankenphp-8.4, crossplane-provider-aws-redshiftserverless, crossplane-provider-aws-kendra, kine, crossplane-provider-aws-route53resolver, crossplane-provider-aws-route53, harbor, snyk-cli, crossplane-provider-aws-acm, crossplane-provider-aws-s3control-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: frankenphp-8.4, crossplane-provider-aws-redshiftserverless, crossplane-provider-aws-kendra, kine, crossplane-provider-aws-route53resolver, crossplane-provider-aws-route53, harbor, snyk-cli, crossplane-provider-aws-acm, crossplane-provider-aws-s3control-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, crossplane-provider-aws-redshiftserverless, authentik, kine, cert-manager-openshift-routes, crossplane-provider-aws-route53resolver, crossplane-provider-aws-route53, grafana-pyroscope-fips, harbor, snyk-cli, kubescape-operator-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, crossplane-provider-aws-redshiftserverless, authentik, kine, cert-manager-openshift-routes, crossplane-provider-aws-route53resolver, crossplane-provider-aws-route53, grafana-pyroscope-fips, harbor, snyk-cli, kubescape-operator-fips,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: cortex, weaviate, juicefs, thanos, bento, cilium, terraform-provider-pagerduty, kubeflow-pipelines, amazon-cloudwatch-agent, grafana-mimir, opentelemetry-collector-contrib, tetragon, tekton-chains, kubescape, slsa-verifier, vcluster, grafana-pyroscope, hubble, promxy...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: cortex, weaviate, juicefs, thanos, bento, cilium, terraform-provider-pagerduty, kubeflow-pipelines, amazon-cloudwatch-agent, grafana-mimir, opentelemetry-collector-contrib, tetragon, tekton-chains, kubescape, slsa-verifier, vcluster, grafana-pyroscope, hubble, promxy...

CVE-2026-5061

The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerability CVE-2026-5061 is fixed in consul-template 0.42.0...

SUSE CVE-2025-11374

Consul and Consul Enterprise's “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

SUSE CVE-2025-11375

Consul and Consul Enterprise's “Consul” event endpoint is vulnerable to denial of service DoS due to lack of maximum value on the Content Length header. This vulnerability, CVE-2025-11375, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...