GO-2025-4081 Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul

Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul...

GO-2025-4082 Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul

Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul...

GHSA-7G3R-8C6V-HFMR vulnerabilities

Vulnerabilities for packages: consul, consul-fips...

CVE-2025-11375 vulnerabilities

Vulnerabilities for packages: consul, consul-fips...

CVE-2025-11374 vulnerabilities

Vulnerabilities for packages: consul, consul-fips...

GHSA-QH7P-PFQ3-677H vulnerabilities

Vulnerabilities for packages: consul, consul-fips...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: localstack, sealed-secrets, crossplane-provider-terraform-fips, pvc-autoresizer-fips, wireguard-go, istio-fips, age, cloudbeat, mc, rancher, vendir-fips, vendir, falco-exporter-fips, prometheus-elasticsearch-exporter, juicefs, elvish, vault-secrets-webhook,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: localstack, sealed-secrets, crossplane-provider-terraform-fips, pvc-autoresizer-fips, wireguard-go, istio-fips, age, cloudbeat, mc, rancher, vendir-fips, vendir, falco-exporter-fips, prometheus-elasticsearch-exporter, juicefs, elvish, vault-secrets-webhook,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: localstack, sealed-secrets, crossplane-provider-terraform-fips, pvc-autoresizer-fips, wireguard-go, istio-fips, age, cloudbeat, mc, rancher, vendir-fips, vendir, falco-exporter-fips, prometheus-elasticsearch-exporter, juicefs, elvish, vault-secrets-webhook,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: localstack, sealed-secrets, crossplane-provider-terraform-fips, pvc-autoresizer-fips, wireguard-go, istio-fips, age, cloudbeat, mc, rancher, vendir-fips, vendir, falco-exporter-fips, prometheus-elasticsearch-exporter, juicefs, elvish, vault-secrets-webhook,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: localstack, sealed-secrets, crossplane-provider-terraform-fips, pvc-autoresizer-fips, wireguard-go, istio-fips, age, cloudbeat, mc, rancher, vendir-fips, vendir, falco-exporter-fips, prometheus-elasticsearch-exporter, juicefs, elvish, vault-secrets-webhook,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: localstack, sealed-secrets, crossplane-provider-terraform-fips, pvc-autoresizer-fips, wireguard-go, istio-fips, age, cloudbeat, mc, rancher, vendir-fips, vendir, falco-exporter-fips, prometheus-elasticsearch-exporter, juicefs, elvish, vault-secrets-webhook,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: localstack, sealed-secrets, crossplane-provider-terraform-fips, pvc-autoresizer-fips, wireguard-go, istio-fips, age, cloudbeat, mc, rancher, vendir-fips, vendir, falco-exporter-fips, prometheus-elasticsearch-exporter, juicefs, elvish, vault-secrets-webhook,...

CVE-2025-54469

A vulnerability was identified in NeuVector, where the enforcer used environment variables CLUSTERRPCPORT and CLUSTERLANPORT to generate a command to be executed via popen, without first sanitising their values. The entry process of the enforcer container is the monitor process. When the enforcer...

Linux Distros Unpatched Vulnerability : CVE-2025-11375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul and Consul Enterprise's Consul event endpoint is vulnerable to denial of service DoS due to lack of maximum value on the Content Length header. This...

Linux Distros Unpatched Vulnerability : CVE-2025-11374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul and Consul Enterprise's Consul key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This...

GHSA-7G3R-8C6V-HFMR Consul key/value endpoint is vulnerable to denial of service

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

Consul event endpoint is vulnerable to denial of service

Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial of service DoS due to lack of maximum value on the Content Length header. This vulnerability, CVE-2025-11375, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

GHSA-QH7P-PFQ3-677H Consul event endpoint is vulnerable to denial of service

Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial of service DoS due to lack of maximum value on the Content Length header. This vulnerability, CVE-2025-11375, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

Allocation of Resources Without Limits or Throttling

Overview github.com/hashicorp/consul/agent is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling...