|
HCSEC-2025-29 - Consul's KV endpoint is vulnerable to denial of service
|
|
0
|
449
|
October 28, 2025
|
|
HCSEC-2025-28 - Consul's event endpoint is vulnerable to denial of service
|
|
0
|
381
|
October 28, 2025
|
|
HCSEC-2024-24 - Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation
|
|
0
|
1384
|
October 30, 2024
|
|
HCSEC-2024-23 - Consul L7 Intentions Vulnerable To Headers Bypass
|
|
0
|
1298
|
October 30, 2024
|
|
HCSEC-2024-22 - Consul L7 Intentions Vulnerable To URL Path Bypass
|
|
0
|
1430
|
October 30, 2024
|
|
HCSEC-2024-16 - Consul UI Development Workflows Vulnerable to Dependency Confusion
|
|
0
|
999
|
July 25, 2024
|
|
HCSEC-2023-32 - Vault, Consul, and Boundary Affected By HTTP/2 “Rapid Reset” Denial of Service Vulnerability (CVE-2023-44487)
|
|
0
|
13809
|
November 2, 2023
|
|
HCSEC-2023-25 - Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers
|
|
0
|
7981
|
August 8, 2023
|
|
HCSEC-2023-16 - Consul Envoy Extension Downstream Proxy Configuration By Upstream Service Owner
|
|
0
|
6242
|
June 2, 2023
|
|
HCSEC-2023-15 - Consul Cluster Peering can Result in Denial of Service
|
|
0
|
6550
|
June 2, 2023
|
|
HCSEC-2021-16 - Consul’s Application-Aware Intentions Deny Action Fails Open When Combined With Default Deny Policy
|
|
0
|
8335
|
July 15, 2021
|
|
HCSEC-2020-14 - Consul DNS and HTTP Cache Abuse Denial of Service
|
|
0
|
4284
|
November 25, 2020
|
|
HCSEC-2023-02 - Vault, Consul, Boundary, and Waypoint Affected By Denial of Service in Go’s net/http (CVE-2022-41717)
|
|
0
|
5357
|
February 8, 2023
|
|
HCSEC-2022-28 - Consul Cluster Peering Leaks Imported Nodes/Services Information
|
|
0
|
6370
|
November 15, 2022
|
|
HCSEC-2022-20 - Consul Service Mesh Intention Bypass with Malicious Certificate Signing Request
|
|
0
|
7874
|
September 21, 2022
|
|
HCSEC-2022-19 - Consul Auto-Config JWT Authorization Missing Input Validation
|
|
0
|
7260
|
September 21, 2022
|
|
HCSEC-2022-10 - Consul’s HTTP Health Check May Allow Server Side Request Forgery
|
|
0
|
10921
|
April 15, 2022
|
|
HCSEC-2022-07 - Consul’s Connect Service Mesh Affected By Recent Envoy Security Releases
|
|
0
|
4873
|
March 1, 2022
|
|
HCSEC-2022-05 - Consul Ingress Gateway Panic Can Shutdown Servers
|
|
0
|
7389
|
February 15, 2022
|
|
HCSEC-2021-34 - Vault, Consul, Boundary, and Waypoint Affected By Denial of Service in Golang’s net/http (CVE-2021-44716)
|
|
0
|
5144
|
December 22, 2021
|
|
HCSEC-2021-29 - Consul Enterprise Namespace Default ACLs Allow Privilege Escalation
|
|
0
|
8134
|
November 13, 2021
|
|
HCSEC-2021-24 - Consul Missing Authorization Check on Txn.Apply Endpoint
|
|
0
|
7807
|
September 1, 2021
|
|
HCSEC-2021-23 - Consul Exposed to Denial of Service in GoGo Protobuf Dependency
|
|
0
|
9208
|
September 1, 2021
|
|
HCSEC-2021-22 - Consul Raft RPC Privilege Escalation
|
|
0
|
9302
|
September 1, 2021
|
|
HCSEC-2021-17 - Consul’s Envoy TLS Configuration Did Not Validate Destination Service Subject Alternative Names
|
|
0
|
7787
|
July 15, 2021
|
|
HCSEC-2021-12 - Codecov Security Event and HashiCorp GPG Key Exposure
|
|
2
|
67057
|
May 4, 2021
|
|
HCSEC-2020-22 - Consul Operator Read ACL Enables Connect Service Masquerading
|
|
0
|
4214
|
November 25, 2020
|
|
HCSEC-2021-08 - Consul Enterprise Audit Log Bypass for HTTP Events
|
|
0
|
7630
|
April 19, 2021
|
|
HCSEC-2021-07 - Consul API KV Endpoint Vulnerable to Cross-Site Scripting
|
|
0
|
9164
|
April 19, 2021
|
|
HCSEC-2020-19 - Consul Enterprise Namespace Config Entry Replication Denial of Service
|
|
0
|
4207
|
November 25, 2020
|