# Vulnerability CVE-2020-10661 Consul template v0.27.2

**URL:** <https://discuss.hashicorp.com/t/vulnerability-cve-2020-10661-consul-template-v0-27-2/37476>\
**Category:** Consul\
**Tags:** consul-template\
**Created:** [March 23, 2022, 9:03pm UTC](https://discuss.hashicorp.com/t/vulnerability-cve-2020-10661-consul-template-v0-27-2/37476 "2022-03-23T21:03:07Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![abhip](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/abhip/32/25895_2.png) [@abhip](https://discuss.hashicorp.com/u/abhip)\
**Post date:** [March 23, 2022, 9:03pm UTC](https://discuss.hashicorp.com/t/vulnerability-cve-2020-10661-consul-template-v0-27-2/37476/1 "2022-03-23T21:03:07Z")

</div>

Hi

When we install Consul template v0.27.2 , the scanner in our environment complains about CVE-2020-10661, which comes from [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault/api). I see that this was fixed in the vault [vault/CHANGELOG.md at main · hashicorp/vault · GitHub](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md#134-march-19th-2020) however the api or sdk is updated, How do we fix or update the version.

---

<div class="post-metadata">

**Author:** ![eikenb](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/eikenb/32/1173_2.png) [@eikenb](https://discuss.hashicorp.com/u/eikenb)\
**Post date:** [March 23, 2022, 9:21pm UTC](https://discuss.hashicorp.com/t/vulnerability-cve-2020-10661-consul-template-v0-27-2/37476/2 "2022-03-23T21:21:55Z")

</div>

Hey @abhip,

That CVE is about Vault itself, not the API or SDK. So no actions are required for tools that use the API or SDK. Updating Vault fixes the issue.

Hope this helps. Thanks for using consul-template!