Topics tagged security-consul

Topic	Views	Activity
HCSEC-2026-25 - Multiple vulnerabilities impacting HashiCorp Consul Security security-consul	191	August 7, 2026
HCSEC-2026-24 - Multiple vulnerabilities impacting HashiCorp Consul MCP Server Security security-consul	228	July 29, 2026
HCSEC-2026-20 - Consul-template vulnerable to path redirections in writeToFile Security security-consul	140	July 8, 2026
HCSEC-2026-18 - Memberlist vulnerable to denial of service via gossip message Security security-nomad , security-consul	174	July 8, 2026
HCSEC-2026-12 - Consul-template vulnerable to sandbox path bypass in file helper through symlink attack Security security-consul	242	May 12, 2026
HCSEC-2026-02 - Consul Vulnerable to Arbitrary File Reads Through the Vault Kubernetes Authentication Provider Security security-consul	472	March 11, 2026
HCSEC-2025-29 - Consul's KV endpoint is vulnerable to denial of service Security security-consul	976	October 28, 2025
HCSEC-2025-28 - Consul's event endpoint is vulnerable to denial of service Security security-consul	834	October 28, 2025
HCSEC-2024-24 - Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation Security security-consul	1514	October 30, 2024
HCSEC-2024-23 - Consul L7 Intentions Vulnerable To Headers Bypass Security security-consul	1372	October 30, 2024
HCSEC-2024-22 - Consul L7 Intentions Vulnerable To URL Path Bypass Security security-consul	1541	October 30, 2024
HCSEC-2024-16 - Consul UI Development Workflows Vulnerable to Dependency Confusion Security security-consul	1025	July 25, 2024
HCSEC-2023-32 - Vault, Consul, and Boundary Affected By HTTP/2 “Rapid Reset” Denial of Service Vulnerability (CVE-2023-44487) Security security-consul , security-vault , security-boundary	14057	November 2, 2023
HCSEC-2023-25 - Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers Security security-consul	8036	August 8, 2023
HCSEC-2023-16 - Consul Envoy Extension Downstream Proxy Configuration By Upstream Service Owner Security security-consul	6281	June 2, 2023
HCSEC-2023-15 - Consul Cluster Peering can Result in Denial of Service Security security-consul	6631	June 2, 2023
HCSEC-2021-16 - Consul’s Application-Aware Intentions Deny Action Fails Open When Combined With Default Deny Policy Security security-consul	8416	July 15, 2021
HCSEC-2020-14 - Consul DNS and HTTP Cache Abuse Denial of Service Security security-consul	4304	November 25, 2020
HCSEC-2023-02 - Vault, Consul, Boundary, and Waypoint Affected By Denial of Service in Go’s net/http (CVE-2022-41717) Security security-consul , security-vault , security-boundary , security-waypoint	5384	February 8, 2023
HCSEC-2022-28 - Consul Cluster Peering Leaks Imported Nodes/Services Information Security security-consul	6420	November 15, 2022
HCSEC-2022-20 - Consul Service Mesh Intention Bypass with Malicious Certificate Signing Request Security security-consul	7948	September 21, 2022
HCSEC-2022-19 - Consul Auto-Config JWT Authorization Missing Input Validation Security security-consul	7327	September 21, 2022
HCSEC-2022-10 - Consul’s HTTP Health Check May Allow Server Side Request Forgery Security security-consul	11083	April 15, 2022
HCSEC-2022-07 - Consul’s Connect Service Mesh Affected By Recent Envoy Security Releases Security security-consul	4885	March 1, 2022
HCSEC-2022-05 - Consul Ingress Gateway Panic Can Shutdown Servers Security security-consul	7428	February 15, 2022
HCSEC-2021-34 - Vault, Consul, Boundary, and Waypoint Affected By Denial of Service in Golang’s net/http (CVE-2021-44716) Security security-consul , security-vault , security-boundary , security-waypoint	5157	December 22, 2021
HCSEC-2021-29 - Consul Enterprise Namespace Default ACLs Allow Privilege Escalation Security security-consul	8173	November 13, 2021
HCSEC-2021-24 - Consul Missing Authorization Check on Txn.Apply Endpoint Security security-consul	7845	September 1, 2021
HCSEC-2021-23 - Consul Exposed to Denial of Service in GoGo Protobuf Dependency Security security-consul	9245	September 1, 2021
HCSEC-2021-22 - Consul Raft RPC Privilege Escalation Security security-consul	9347	September 1, 2021