|
About HashiCorp security updates
|
|
0
|
13756
|
October 8, 2020
|
|
HCSEC-2026-54 - Boundary vulnerable to server-side request forgery in Vault credential store
|
|
0
|
236
|
October 29, 2026
|
|
HCSEC-2026-53 - Nomad allocation data migration may allow host directory permission modification via symlink following
|
|
0
|
134
|
October 29, 2026
|
|
HCSEC-2026-52 - Nomad dispatch payload writes can escape the allocation directory through symlinks
|
|
0
|
180
|
October 29, 2026
|
|
HCSEC-2026-51 - Nomad vulnerable to cross-namespace information disclosure in multiple endpoints
|
|
0
|
216
|
October 29, 2026
|
|
HCSEC-2026-50 - Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules
|
|
0
|
617
|
October 26, 2026
|
|
HCSEC-2026-49 - Consul vulnerable to an authorization bypass in health check registration
|
|
0
|
195
|
October 26, 2026
|
|
HCSEC-2026-48 - Consul vulnerable to a denial of service in HTTP APIs
|
|
0
|
164
|
October 26, 2026
|
|
HCSEC-2026-47 - Consul vulnerable to an authorization bypass in service mesh registration
|
|
0
|
210
|
October 26, 2026
|
|
HCSEC-2026-46 - Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API
|
|
0
|
286
|
October 26, 2026
|
|
HCSEC-2026-45 - Updates to HashiCorp subprocessors
|
|
0
|
101
|
October 13, 2026
|
|
HCSEC-2026-44 - Go-getter vulnerable to a path traversal in S3/GCS directory download handling
|
|
0
|
180
|
October 8, 2026
|
|
HCSEC-2026-43 - Vault Inconsistent ACL Policy Evaluation May Allow Bypass of Deny Restrictions
|
|
0
|
439
|
October 7, 2026
|
|
HCSEC-2026-42 - Vault Enterprise ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution
|
|
0
|
333
|
October 7, 2026
|
|
HCSEC-2026-41 - Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots
|
|
0
|
624
|
October 7, 2026
|
|
HCSEC-2026-40 - Vault PKI ACME Default Directory Policy May Issue Certificates With Unverified Identities
|
|
0
|
337
|
October 7, 2026
|
|
HCSEC-2026-39 - Go-getter vulnerable to a privilege escalation issue in its archive decompression handling
|
|
0
|
249
|
September 15, 2026
|
|
HCSEC-2026-38 - Consul-template vulnerable to an information disclosure issue in error handling
|
|
0
|
239
|
September 10, 2026
|
|
HCSEC-2026-37 - Consul vulnerable to an authorization bypass in the Connect service mesh
|
|
0
|
258
|
September 10, 2026
|
|
HCSEC-2026-36 - Consul vulnerable to an authorization bypass in the catalog deregistration path
|
|
0
|
206
|
September 10, 2026
|
|
HCSEC-2026-35 - Consul vulnerable to a denial of service in the native RPC listener
|
|
0
|
214
|
September 10, 2026
|
|
HCSEC-2026-34 - Consul vulnerable to an authorization bypass in the catalog node-write path
|
|
0
|
274
|
September 10, 2026
|
|
HCSEC-2026-33 - HashiCorp Linux Signing GPG Key Update (CA026560)
|
|
0
|
2064
|
September 10, 2026
|
|
HCSEC-2026-32 - Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths
|
|
0
|
777
|
August 24, 2026
|
|
HCSEC-2026-31 - Go-slug vulnerable to exclusion bypass in .terraformignore handling
|
|
0
|
220
|
August 20, 2026
|
|
HCSEC-2026-30 - Updates to HashiCorp subprocessors
|
|
0
|
112
|
August 18, 2026
|
|
HCSEC-2026-29 - Packer vulnerable to arbitrary file write via crafted plugin archive during installation
|
|
0
|
219
|
August 17, 2026
|
|
HCSEC-2026-28 - Vault Secrets Operator vulnerable to arbitrary file read via AppRole secretIDPath
|
|
0
|
886
|
August 13, 2026
|
|
HCSEC-2026-27 - Vault Enterprise vulnerable to cross-namespace entity deletion
|
|
0
|
590
|
August 10, 2026
|
|
HCSEC-2026-26 - Vault vulnerable to LIST authorization bypass via trailing-slash strip
|
|
0
|
436
|
August 10, 2026
|