|
About HashiCorp security updates
|
|
0
|
12146
|
October 8, 2020
|
|
HCSEC-2025-11 Vault Vulnerable to Recovery Key Cancellation Denial of Service
|
|
0
|
489
|
June 25, 2025
|
|
HCSEC-2025-12 - Nomad Vulnerable To Incorrect ACL Policy Lookup Attached To A Job
|
|
0
|
402
|
June 11, 2025
|
|
HCSEC-2025-10 - Update to HashiCorp Data Transfer Impact Assessment
|
|
0
|
101
|
May 23, 2025
|
|
HCSEC-2025-08 - Nomad Enterprise Vulnerable To Violation Of Mandatory Sentinel Policies in Job Submissions via Policy Override
|
|
0
|
296
|
May 13, 2025
|
|
HCSEC-2025-09 - Vault May Expose Sensitive Information in Error Logs When Processing Malformed Data With the KV v2 Plugin
|
|
0
|
1156
|
May 2, 2025
|
|
HCSEC-2025-07 - Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login
|
|
0
|
558
|
May 2, 2025
|
|
HCSEC-2025-06 - Updates to HashiCorp Subprocessors
|
|
0
|
162
|
March 31, 2025
|
|
HCSEC-2025-05 - Terraform Enterprise’s Single Sign-On and Ruby SAML’s CVE-2025-25291 and CVE-2025-25292
|
|
0
|
391
|
March 13, 2025
|
|
HCSEC-2025-04 - Nomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs
|
|
0
|
297
|
March 10, 2025
|
|
HCSEC-2025-03 - HashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication Bypass
|
|
0
|
386
|
February 20, 2025
|
|
HCSEC-2025-02 - Nomad Vulnerable To Event Stream Namespace ACL Policy Bypass Through Wildcard Namespace
|
|
0
|
296
|
February 12, 2025
|
|
HCSEC-2025-01 - HashiCorp go-slug Vulnerable to Zip Slip Attack
|
|
0
|
770
|
January 21, 2025
|
|
HCSEC-2024-29 - Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Token
|
|
0
|
405
|
December 20, 2024
|
|
HCSEC-2024-28 - Boundary Controller Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service
|
|
0
|
369
|
December 12, 2024
|
|
HCSEC-2024-27 - Nomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission
|
|
0
|
630
|
November 7, 2024
|
|
HCSEC-2024-26 - Vault Vulnerable to Denial of Service Through Memory Exhaustion When Processing Raft Cluster Join Requests
|
|
0
|
1363
|
October 31, 2024
|
|
HCSEC-2024-24 - Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation
|
|
0
|
1201
|
October 30, 2024
|
|
HCSEC-2024-23 - Consul L7 Intentions Vulnerable To Headers Bypass
|
|
0
|
1164
|
October 30, 2024
|
|
HCSEC-2024-22 - Consul L7 Intentions Vulnerable To URL Path Bypass
|
|
0
|
1291
|
October 30, 2024
|
|
HCSEC-2024-25 - Vagrant VMware Utility installation files vulnerable to modification by unprivileged user
|
|
0
|
894
|
October 29, 2024
|
|
HCSEC-2024-21 - Vault Operators in Root Namespace May Elevate Their Privileges
|
|
0
|
2839
|
October 10, 2024
|
|
HCSEC-2024-20 - Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default
|
|
0
|
2178
|
September 26, 2024
|
|
HCSEC-2024-19 - Terraform Enterprise’s Single Sign-On And Ruby SAML’s CVE-2024-45409
|
|
1
|
1196
|
October 21, 2024
|
|
HCSEC-2024-18 - Vault Leaks Client Token and Token Accessor in Audit Devices
|
|
0
|
2806
|
August 31, 2024
|
|
HCSEC-2024-17 - Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking
|
|
0
|
1239
|
August 14, 2024
|
|
HCSEC-2024-16 - Consul UI Development Workflows Vulnerable to Dependency Confusion
|
|
0
|
967
|
July 25, 2024
|
|
HCSEC-2024-15 - Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking
|
|
0
|
1184
|
July 22, 2024
|
|
HCSEC-2024-14 - Vault Vulnerable to Denial of Service When Setting a Proxy Protocol Behavior
|
|
0
|
2005
|
July 11, 2024
|
|
HCSEC-2024-13 - HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation
|
|
0
|
3140
|
June 25, 2024
|