CVE-2022-38149

HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returned by the template.Template.Execute method, when given a template using Vault secret contents incorrectly. Fixed in 0.27.3, 0.28.3, and 0.29.2...

CVE-2022-38149

HashiCorp Consul Template versions up to 0.27.2, 0.28.2, and 0.29.1 could expose Vault secret contents in error text produced by Template.Execute when processing certain templates. The issue, tracked as CVE-2022-38149, has been fixed in 0.27.3, 0.28.3, and 0.29.2. No other products or components ...