|
HCSEC-2026-03 - HashiCorp GPG Key (72D7468F) Update
|
|
0
|
2563
|
March 12, 2026
|
|
HCSEC-2026-02 - Consul Vulnerable to Arbitrary File Reads Through the Vault Kubernetes Authentication Provider
|
|
0
|
488
|
March 11, 2026
|
|
HCSEC-2026-01 - Arbitrary code execution in React server-side rendering of untrusted MDX content
|
|
0
|
8757
|
February 12, 2026
|
|
HCSEC-2025-33 - Vault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method
|
|
0
|
1488
|
November 21, 2025
|
|
HCSEC-2025-34 - Terraform Enterprise state versions can be created by users without sufficient write access
|
|
0
|
597
|
November 21, 2025
|
|
HCSEC-2025-29 - Consul's KV endpoint is vulnerable to denial of service
|
|
0
|
992
|
October 28, 2025
|
|
HCSEC-2025-28 - Consul's event endpoint is vulnerable to denial of service
|
|
0
|
848
|
October 28, 2025
|
|
HCSEC-2025-32 - Incomplete Fix For Previous Vault DoS Issue
|
|
0
|
553
|
October 23, 2025
|
|
HCSEC-2025-31- Vault Vulnerable to Denial of Service Due to Rate Limit Regression
|
|
0
|
2007
|
October 23, 2025
|
|
HCSEC-2025-30 - Vault AWS Auth Method Authentication Bypass Through Mishandling of Cache Entries
|
|
0
|
1750
|
October 23, 2025
|
|
HCSEC-2025-25 - Updates to HashiCorp subprocessors
|
|
0
|
288
|
September 30, 2025
|
|
HCSEC-2025-24 - Vault Denial of Service Though Complex JSON Payloads
|
|
0
|
2817
|
August 28, 2025
|
|
HCSEC-2025-23 - HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack
|
|
0
|
1363
|
August 15, 2025
|
|
HCSEC-2025-22 - Multiple Vulnerabilities Impacting HashiCorp Vault and Vault Enterprise
|
|
0
|
6041
|
August 6, 2025
|
|
HCSEC-2025-21 - Vault User Enumeration in Userpass Auth Method
|
|
1
|
1899
|
February 13, 2026
|
|
HCSEC-2025-20 - Vault LDAP MFA Enforcement Bypass When Using Username As Alias
|
|
0
|
2094
|
August 6, 2025
|
|
HCSEC-2025-19 - Vault Login MFA Bypass of Rate Limiting and TOTP Token Reuse
|
|
0
|
1506
|
August 1, 2025
|
|
HCSEC-2025-18 - Vault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates
|
|
0
|
1505
|
August 1, 2025
|
|
HCSEC-2025-17 - Vault TOTP Secrets Engine Code Reuse
|
|
0
|
1535
|
August 1, 2025
|
|
HCSEC-2025-16 - Vault Userpass and LDAP User Lockout Bypass
|
|
0
|
1754
|
August 1, 2025
|
|
HCSEC-2025-15 - Timing Side-Channel in Vault’s Userpass Auth Method
|
|
0
|
1534
|
August 1, 2025
|
|
HCSEC-2025-14 - Privileged Vault Operator May Execute Code on the Underlying Host
|
|
0
|
5619
|
August 1, 2025
|
|
HCSEC-2025-13 - Vault Root Namespace Operator May Elevate Token Privileges
|
|
0
|
2465
|
August 1, 2025
|
|
HCSEC-2025-11 Vault Vulnerable to Recovery Key Cancellation Denial of Service
|
|
0
|
1349
|
June 25, 2025
|
|
HCSEC-2025-12 - Nomad Vulnerable To Incorrect ACL Policy Lookup Attached To A Job
|
|
0
|
953
|
June 11, 2025
|
|
HCSEC-2025-10 - Update to HashiCorp Data Transfer Impact Assessment
|
|
0
|
287
|
May 23, 2025
|
|
HCSEC-2025-08 - Nomad Enterprise Vulnerable To Violation Of Mandatory Sentinel Policies in Job Submissions via Policy Override
|
|
0
|
690
|
May 13, 2025
|
|
HCSEC-2025-09 - Vault May Expose Sensitive Information in Error Logs When Processing Malformed Data With the KV v2 Plugin
|
|
0
|
2451
|
May 2, 2025
|
|
HCSEC-2025-07 - Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login
|
|
0
|
1067
|
May 2, 2025
|
|
HCSEC-2025-06 - Updates to HashiCorp Subprocessors
|
|
0
|
366
|
March 31, 2025
|