1226 matches found
CLEANSTART-2026-ME47927 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...
CLEANSTART-2026-BQ46815 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-PA85871 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...
CLEANSTART-2026-IA37596 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...
CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
Malicious code in chalk-consul (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192897 Malicious code in chalk-consul (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
The vulnerability of the Consul and Consul Enterprise service configuration tool, which involves unlimited distribution of resources, allows a perpetrator to cause service failures.
The vulnerability of the Consul and Consul Enterprise service configuration tools is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the Consul and Consul Enterprise service configuration tool, which involves unlimited distribution of resources, allows a perpetrator to cause service failures.
The vulnerability of the Consul and Consul Enterprise service configuration tools is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
CVE-2025-61727 vulnerabilities
Vulnerabilities for packages: nova, kubeflow-katib, mongo-tools, kiali, opencost, kube-bench, thanos-operator, polaris, chisel, kubernetes-dashboard-web, seaweedfs, kubeflow-pipelines, opentelemetry-collector-contrib, nri-jmx, kubernetes-csi-external-resizer, oauth2-proxy, mountpoint-s3-csi-drive...
GHSA-5MH9-3JWC-RP59 vulnerabilities
Vulnerabilities for packages: nova, kubeflow-katib, mongo-tools, kiali, opencost, kube-bench, thanos-operator, polaris, chisel, kubernetes-dashboard-web, seaweedfs, kubeflow-pipelines, opentelemetry-collector-contrib, nri-jmx, kubernetes-csi-external-resizer, oauth2-proxy, mountpoint-s3-csi-drive...
GHSA-5MH9-3JWC-RP59 vulnerabilities
Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, sftpgo-plugin-pubsub, terraform-provider-sendgrid-fips, snyk-cli, task, src, go-discover, nginx-prometheus-exporter-fips, prometheus-beat-exporter-fips, gcp-compute-persistent-disk-csi-driver-fips, nvidia-nsight-compute-13.2...
ROS-20251203-16
A vulnerability in the Consul and Consul Enterprise service configuration tool is related to incorrect validation of the Content Length of the Content Length header. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service Vulnerability in the Consul an...
Security Bulletin: Consul’s KV endpoint is vulnerable to denial of service
Summary Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...
Security Bulletin:Consul’s event endpoint is vulnerable to denial of service
Summary Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial of service DoS due to lack of maximum value on the Content Length header. Vulnerability Details CVEID: CVE-2025-11375 DESCRIPTION: Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial ...
BIT-CONSUL-2025-11375 Consul's event endpoint is vulnerable to denial of service
Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial of service DoS due to lack of maximum value on the Content Length header. This vulnerability, CVE-2025-11375, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...
BIT-CONSUL-2025-11374 Consul's KV endpoint is vulnerable to denial of service
Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...