|
About HashiCorp security updates
|
|
0
|
13597
|
October 8, 2020
|
|
HCSEC-2026-44 - Go-getter vulnerable to a path traversal in S3/GCS directory download handling
|
|
0
|
86
|
October 8, 2026
|
|
HCSEC-2026-43 - Vault Inconsistent ACL Policy Evaluation May Allow Bypass of Deny Restrictions
|
|
0
|
224
|
October 7, 2026
|
|
HCSEC-2026-42 - Vault Enterprise ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution
|
|
0
|
178
|
October 7, 2026
|
|
HCSEC-2026-41 - Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots
|
|
0
|
328
|
October 7, 2026
|
|
HCSEC-2026-40 - Vault PKI ACME Default Directory Policy May Issue Certificates With Unverified Identities
|
|
0
|
211
|
October 7, 2026
|
|
HCSEC-2026-39 - Go-getter vulnerable to a privilege escalation issue in its archive decompression handling
|
|
0
|
204
|
September 15, 2026
|
|
HCSEC-2026-38 - Consul-template vulnerable to an information disclosure issue in error handling
|
|
0
|
208
|
September 10, 2026
|
|
HCSEC-2026-37 - Consul vulnerable to an authorization bypass in the Connect service mesh
|
|
0
|
221
|
September 10, 2026
|
|
HCSEC-2026-36 - Consul vulnerable to an authorization bypass in the catalog deregistration path
|
|
0
|
168
|
September 10, 2026
|
|
HCSEC-2026-35 - Consul vulnerable to a denial of service in the native RPC listener
|
|
0
|
173
|
September 10, 2026
|
|
HCSEC-2026-34 - Consul vulnerable to an authorization bypass in the catalog node-write path
|
|
0
|
223
|
September 10, 2026
|
|
HCSEC-2026-33 - HashiCorp Linux Signing GPG Key Update (CA026560)
|
|
0
|
1658
|
September 10, 2026
|
|
HCSEC-2026-32 - Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths
|
|
0
|
602
|
August 24, 2026
|
|
HCSEC-2026-31 - Go-slug vulnerable to exclusion bypass in .terraformignore handling
|
|
0
|
184
|
August 20, 2026
|
|
HCSEC-2026-30 - Updates to HashiCorp subprocessors
|
|
0
|
85
|
August 18, 2026
|
|
HCSEC-2026-29 - Packer vulnerable to arbitrary file write via crafted plugin archive during installation
|
|
0
|
185
|
August 17, 2026
|
|
HCSEC-2026-28 - Vault Secrets Operator vulnerable to arbitrary file read via AppRole secretIDPath
|
|
0
|
810
|
August 13, 2026
|
|
HCSEC-2026-27 - Vault Enterprise vulnerable to cross-namespace entity deletion
|
|
0
|
548
|
August 10, 2026
|
|
HCSEC-2026-26 - Vault vulnerable to LIST authorization bypass via trailing-slash strip
|
|
0
|
375
|
August 10, 2026
|
|
HCSEC-2026-25 - Multiple vulnerabilities impacting HashiCorp Consul
|
|
0
|
487
|
August 7, 2026
|
|
HCSEC-2026-24 - Multiple vulnerabilities impacting HashiCorp Consul MCP Server
|
|
0
|
346
|
July 29, 2026
|
|
HCSEC-2026-23 - Multiple vulnerabilities impacting HashiCorp Terraform MCP Server
|
|
0
|
1025
|
July 28, 2026
|
|
HCSEC-2026-22 - Nomad vulnerable to cross-namespace host volume claim deletion
|
|
0
|
230
|
July 8, 2026
|
|
HCSEC-2026-21 - Nomad vulnerable to sandbox escape in Docker task driver
|
|
0
|
262
|
July 8, 2026
|
|
HCSEC-2026-20 - Consul-template vulnerable to path redirections in writeToFile
|
|
0
|
187
|
July 8, 2026
|
|
HCSEC-2026-19 - Nomad Docker driver vulnerable to host namespace bypass on Linux
|
|
0
|
209
|
July 8, 2026
|
|
HCSEC-2026-18 - Memberlist vulnerable to denial of service via gossip message
|
|
0
|
232
|
July 8, 2026
|
|
HCSEC-2026-17 - Terraform Enterprise vulnerable to arbitrary file read
|
|
0
|
580
|
July 6, 2026
|
|
HCSEC-2026-16 - Vault Audit Device Plugin Directory Guard Bypass via Legacy Path Option
|
|
0
|
417
|
July 1, 2026
|