github.com/hashicorp/consul (Go)
Advisories
88
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 1.22.5 or later clears every advisory below that has a fix.
Upgrade commands
go
go get github.com/hashicorp/consul@v1.22.5 && go mod tidyKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-cpfq-66p2-336j Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication |
Medium EPSS 0.50% |
< 1.18.21 | 1.18.21 |
| GHSA-cpfq-66p2-336j Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication |
Medium EPSS 0.50% |
< 1.22.5 | 1.22.5 |
| GHSA-cpfq-66p2-336j Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication |
Medium EPSS 0.50% |
>= 1.19.0, < 1.21.11 | 1.21.11 |
| GHSA-cpfq-66p2-336j Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication |
Medium EPSS 0.50% |
>= 1.22.0-rc1, < 1.22.5 | 1.22.5 |
| GHSA-qh7p-pfq3-677h Consul event endpoint is vulnerable to denial of service |
Medium EPSS 0.43% |
< 1.22.0 | 1.22.0 |
| GHSA-qh7p-pfq3-677h Consul event endpoint is vulnerable to denial of service |
Medium EPSS 0.43% |
< 1.22.0 | 1.22.0 |
| GHSA-7g3r-8c6v-hfmr Consul key/value endpoint is vulnerable to denial of service |
Medium EPSS 0.43% |
< 1.22.0 | 1.22.0 |
| GHSA-7g3r-8c6v-hfmr Consul key/value endpoint is vulnerable to denial of service |
Medium EPSS 0.43% |
< 1.22.0 | 1.22.0 |
| GHSA-99wr-c2px-grmh Hashicorp Consul Cross-site Scripting vulnerability |
Medium EPSS 0.40% |
>= 1.4.1, < 1.20.0 | 1.20.0 |
| GHSA-99wr-c2px-grmh Hashicorp Consul Cross-site Scripting vulnerability |
Medium EPSS 0.40% |
>= 1.4.1, < 1.20.0 | 1.20.0 |
| GHSA-5c4w-8hhh-3c3h Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability |
Medium EPSS 0.47% |
>= 1.9.0, < 1.20.1 | 1.20.1 |
| GHSA-5c4w-8hhh-3c3h Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability |
Medium EPSS 0.47% |
>= 1.9.0, < 1.20.1 | 1.20.1 |
| GHSA-chgm-7r52-whjj Hashicorp Consul Path Traversal vulnerability |
Medium EPSS 0.77% |
>= 1.9.0, < 1.20.1 | 1.20.1 |
| GHSA-chgm-7r52-whjj Hashicorp Consul Path Traversal vulnerability |
Medium EPSS 0.77% |
>= 1.9.0, < 1.20.1 | 1.20.1 |
| GHSA-6m72-467w-94rh Privilege Escalation in HashiCorp Consul |
Medium EPSS 1.45% |
>= 1.7.0, < 1.7.10 | 1.7.10 |
| GHSA-6m72-467w-94rh Privilege Escalation in HashiCorp Consul |
Medium EPSS 1.45% |
>= 1.8.0, < 1.8.6 | 1.8.6 |
| GHSA-6m72-467w-94rh Privilege Escalation in HashiCorp Consul |
Medium EPSS 1.45% |
>= 1.2.0, < 1.6.10>= 1.7.0, < 1.7.10>= 1.8.0, < 1.8.6 | 1.6.101.7.101.8.6 |
| GHSA-6m72-467w-94rh Privilege Escalation in HashiCorp Consul |
Medium EPSS 1.45% |
>= 1.2.0, < 1.6.10 | 1.6.10 |
| GHSA-496g-fr33-whrf Denial of service in HashiCorp Consul |
High EPSS 2.61% |
>= 1.7.0, < 1.7.9>= 1.8.0, < 1.8.5 | 1.7.91.8.5 |
| GHSA-496g-fr33-whrf Denial of service in HashiCorp Consul |
High EPSS 2.61% |
>= 1.7.0, < 1.7.9 | 1.7.9 |
| GHSA-496g-fr33-whrf Denial of service in HashiCorp Consul |
High EPSS 2.61% |
>= 1.8.0, < 1.8.5 | 1.8.5 |
| GHSA-9rhf-q362-77mx Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers |
High EPSS 0.45% |
>= 1.16.0, < 1.16.1 | 1.16.1 |
| GHSA-9rhf-q362-77mx Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers |
High EPSS 0.45% |
>= 1.16.0, < 1.16.1 | 1.16.1 |
| GHSA-h65h-v7fw-4p38 HashiCorp Consul Incorrect Access Control vulnerability |
High EPSS 1.16% |
>= 1.4.0, < 1.5.1 | 1.5.1 |
| GHSA-h65h-v7fw-4p38 HashiCorp Consul Incorrect Access Control vulnerability |
High EPSS 1.16% |
>= 1.4.0, < 1.5.1 | 1.5.1 |
| GHSA-rqjq-ww83-wv5c Hashicorp Consul allows user with service:write permissions to patch remote proxy instances |
Medium EPSS 0.58% |
>= 1.15.0, < 1.15.3 | 1.15.3 |
| GHSA-rqjq-ww83-wv5c Hashicorp Consul allows user with service:write permissions to patch remote proxy instances |
Medium EPSS 0.58% |
>= 1.15.0, < 1.15.3 | 1.15.3 |
| GHSA-c57c-7hrj-6q6v Hashicorp Consul vulnerable to denial of service |
High EPSS 0.77% |
< 1.14.5 | 1.14.5 |
| GHSA-c57c-7hrj-6q6v Hashicorp Consul vulnerable to denial of service |
High EPSS 0.77% |
< 1.14.5>= 1.15.0, < 1.15.3 | 1.14.51.15.3 |
| GHSA-c57c-7hrj-6q6v Hashicorp Consul vulnerable to denial of service |
High EPSS 0.77% |
>= 1.15.0, < 1.15.3 | 1.15.3 |
| GHSA-wj6x-hcc2-f32j Consul Server Panic when Ingress and API Gateways Configured with Peering Connections |
Medium EPSS 1.00% |
>= 1.14.0, < 1.14.5 | 1.14.5 |
| GHSA-wj6x-hcc2-f32j Consul Server Panic when Ingress and API Gateways Configured with Peering Connections |
Medium EPSS 1.00% |
>= 1.14.0, < 1.14.5 | 1.14.5 |
| GHSA-gw2g-hhc9-wgjh Missing Authorization in HashiCorp Consul |
High EPSS 0.72% |
>= 1.13.0, < 1.14.0 | 1.14.0 |
| GHSA-gw2g-hhc9-wgjh Missing Authorization in HashiCorp Consul |
High EPSS 0.72% |
>= 1.13.0, < 1.14.0 | 1.14.0 |
| GHSA-m69r-9g56-7mv8 HashiCorp Consul vulnerable to authorization bypass |
Medium EPSS 1.09% |
>= 1.13.0, < 1.13.2 | 1.13.2 |
| GHSA-m69r-9g56-7mv8 HashiCorp Consul vulnerable to authorization bypass |
Medium EPSS 1.09% |
< 1.11.9>= 1.12.0, < 1.12.5>= 1.13.0, < 1.13.2 | 1.11.91.12.51.13.2 |
| GHSA-m69r-9g56-7mv8 HashiCorp Consul vulnerable to authorization bypass |
Medium EPSS 1.09% |
< 1.11.9 | 1.11.9 |
| GHSA-m69r-9g56-7mv8 HashiCorp Consul vulnerable to authorization bypass |
Medium EPSS 1.09% |
>= 1.12.0, < 1.12.5 | 1.12.5 |
| GHSA-hr3v-8cp3-68rf HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions |
High EPSS 1.07% |
>= 1.8.1, < 1.11.9 | 1.11.9 |
| GHSA-hr3v-8cp3-68rf HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions |
High EPSS 1.07% |
>= 1.8.1, < 1.11.9>= 1.12.0, < 1.12.5>= 1.13.0, < 1.13.2 | 1.11.91.12.51.13.2 |
| GHSA-hr3v-8cp3-68rf HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions |
High EPSS 1.07% |
>= 1.13.0, < 1.13.2 | 1.13.2 |
| GHSA-hr3v-8cp3-68rf HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions |
High EPSS 1.07% |
>= 1.12.0, < 1.12.5 | 1.12.5 |
| GHSA-8xmx-h8rq-h94j HashiCorp Consul Cross-site Scripting vulnerability |
Medium EPSS 6.07% |
< 1.7.14>= 1.8.0, < 1.8.10>= 1.9.0, < 1.9.5 | 1.7.141.8.101.9.5 |
| GHSA-8xmx-h8rq-h94j HashiCorp Consul Cross-site Scripting vulnerability |
Medium EPSS 6.07% |
>= 1.9.0, < 1.9.5 | 1.9.5 |
| GHSA-8xmx-h8rq-h94j HashiCorp Consul Cross-site Scripting vulnerability |
Medium EPSS 6.07% |
>= 1.8.0, < 1.8.10 | 1.8.10 |
| GHSA-8xmx-h8rq-h94j HashiCorp Consul Cross-site Scripting vulnerability |
Medium EPSS 6.07% |
< 1.7.14 | 1.7.14 |
| GHSA-4qvx-qq5w-695p HashiCorp Consul can use cleartext agent-to-agent RPC communication |
Medium EPSS 1.22% |
>= 0.5.1, < 1.4.1 | 1.4.1 |
| GHSA-4qvx-qq5w-695p HashiCorp Consul can use cleartext agent-to-agent RPC communication |
Medium EPSS 1.22% |
>= 0.5.1, < 1.4.1 | 1.4.1 |
| GHSA-q7fx-wm2p-qfj8 HashiCorp Consul vulnerable to Origin Validation Error |
High EPSS 0.61% |
< 1.4.4 | 1.4.4 |
| GHSA-q7fx-wm2p-qfj8 HashiCorp Consul vulnerable to Origin Validation Error |
High EPSS 0.61% |
< 1.4.4 | 1.4.4 |
| GHSA-fhm8-cxcv-pwvc HashiCorp Consul Access Restriction Bypass |
High EPSS 1.25% |
>= 1.4.0, < 1.4.3 | 1.4.3 |
| GHSA-fhm8-cxcv-pwvc HashiCorp Consul Access Restriction Bypass |
High EPSS 1.25% |
>= 1.4.0, < 1.4.3 | 1.4.3 |
| GHSA-q6h7-4qgw-2j9p Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector |
High EPSS 8.75% |
< 1.9.17>= 1.10.0, < 1.10.10>= 1.11.0, < 1.11.5 | 1.9.171.10.101.11.5 |
| GHSA-q6h7-4qgw-2j9p Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector |
High EPSS 8.75% |
< 1.9.17 | 1.9.17 |
| GHSA-q6h7-4qgw-2j9p Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector |
High EPSS 8.75% |
>= 1.10.0, < 1.10.10 | 1.10.10 |
| GHSA-q6h7-4qgw-2j9p Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector |
High EPSS 8.75% |
>= 1.11.0, < 1.11.5 | 1.11.5 |
| GHSA-hj93-5fg3-3chr HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers |
Medium EPSS 1.49% |
>= 1.8.0, < 1.9.15 | 1.9.15 |
| GHSA-hj93-5fg3-3chr HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers |
Medium EPSS 1.49% |
>= 1.8.0, < 1.9.15>= 1.10.0, < 1.10.8>= 1.11.0, < 1.11.3 | 1.9.151.10.81.11.3 |
| GHSA-hj93-5fg3-3chr HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers |
Medium EPSS 1.49% |
>= 1.11.0, < 1.11.3 | 1.11.3 |
| GHSA-hj93-5fg3-3chr HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers |
Medium EPSS 1.49% |
>= 1.10.0, < 1.10.8 | 1.10.8 |
| GHSA-q2qr-3c2p-9235 Denial of Service (DoS) in HashiCorp Consul |
Medium EPSS 1.71% |
>= 1.7.0, < 1.7.4 | 1.7.4 |
| GHSA-q2qr-3c2p-9235 Denial of Service (DoS) in HashiCorp Consul |
Medium EPSS 1.71% |
>= 1.6.0-beta1, < 1.6.6>= 1.7.0, < 1.7.4 | 1.6.61.7.4 |
| GHSA-q2qr-3c2p-9235 Denial of Service (DoS) in HashiCorp Consul |
Medium EPSS 1.71% |
>= 1.6.0-beta1, < 1.6.6 | 1.6.6 |
| GHSA-6hw5-6gcx-phmw HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. |
Medium EPSS 1.42% |
>= 1.10.1, < 1.10.2 | 1.10.2 |
| GHSA-6hw5-6gcx-phmw HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. |
Medium EPSS 1.42% |
< 1.8.15>= 1.9.0, < 1.9.9>= 1.10.1, < 1.10.2 | 1.8.151.9.91.10.2 |
| GHSA-6hw5-6gcx-phmw HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. |
Medium EPSS 1.42% |
< 1.8.15 | 1.8.15 |
| GHSA-6hw5-6gcx-phmw HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. |
Medium EPSS 1.42% |
>= 1.9.0, < 1.9.9 | 1.9.9 |
| GHSA-ccw8-7688-vqx4 HashiCorp Consul Privilege Escalation Vulnerability |
High EPSS 1.15% |
>= 1.10.1, < 1.10.2 | 1.10.2 |
| GHSA-ccw8-7688-vqx4 HashiCorp Consul Privilege Escalation Vulnerability |
High EPSS 1.15% |
< 1.8.15>= 1.9.0, < 1.9.9>= 1.10.1, < 1.10.2 | 1.8.151.9.91.10.2 |
| GHSA-ccw8-7688-vqx4 HashiCorp Consul Privilege Escalation Vulnerability |
High EPSS 1.15% |
< 1.8.15 | 1.8.15 |
| GHSA-ccw8-7688-vqx4 HashiCorp Consul Privilege Escalation Vulnerability |
High EPSS 1.15% |
>= 1.9.0, < 1.9.9 | 1.9.9 |
| GHSA-r9w6-rhh9-7v53 Incorrect Authorization in HashiCorp Consul |
Medium EPSS 1.41% |
>= 1.4.1, < 1.6.3 | 1.6.3 |
| GHSA-r9w6-rhh9-7v53 Incorrect Authorization in HashiCorp Consul |
Medium EPSS 1.41% |
>= 1.4.1, < 1.6.3 | 1.6.3 |
| GHSA-8h2g-r292-j8xh HashiCorp Consul L7 deny intention results in an allow action |
High EPSS 1.69% |
< 1.10.1 | 1.10.1 |
| GHSA-8h2g-r292-j8xh HashiCorp Consul L7 deny intention results in an allow action |
High EPSS 1.69% |
< 1.10.1 | 1.10.1 |
| GHSA-25gf-8qrr-g78r Hashicorp Consul Missing SSL Certificate Validation |
High EPSS 1.46% |
< 1.10.1 | 1.10.1 |
| GHSA-25gf-8qrr-g78r Hashicorp Consul Missing SSL Certificate Validation |
High EPSS 1.46% |
< 1.10.1 | 1.10.1 |
| GHSA-hwqm-x785-qh8p Incorrect Permission Assignment for Critical Resource in Hashicorp Consul |
Medium EPSS 1.55% |
>= 1.7.0, < 1.7.4 | 1.7.4 |
| GHSA-hwqm-x785-qh8p Incorrect Permission Assignment for Critical Resource in Hashicorp Consul |
Medium EPSS 1.55% |
>= 1.6.0, < 1.6.6>= 1.7.0, < 1.7.4 | 1.6.61.7.4 |
| GHSA-hwqm-x785-qh8p Incorrect Permission Assignment for Critical Resource in Hashicorp Consul |
Medium EPSS 1.55% |
>= 1.6.0, < 1.6.6 | 1.6.6 |
| GHSA-rqjq-mrgx-85hp Allocation of Resources Without Limits or Throttling in Hashicorp Consul |
High EPSS 2.92% |
>= 1.2.0, < 1.6.6 | 1.6.6 |
| GHSA-rqjq-mrgx-85hp Allocation of Resources Without Limits or Throttling in Hashicorp Consul |
High EPSS 2.92% |
>= 1.2.0, < 1.6.6>= 1.7.0, < 1.7.4 | 1.6.61.7.4 |
| GHSA-rqjq-mrgx-85hp Allocation of Resources Without Limits or Throttling in Hashicorp Consul |
High EPSS 2.92% |
>= 1.7.0, < 1.7.4 | 1.7.4 |
| GHSA-p2j5-3f4c-224r Improper Input Validation in HashiCorp Consul |
Medium EPSS 1.77% |
>= 1.6.0-beta1, < 1.6.6>= 1.7.0, < 1.7.4 | 1.6.61.7.4 |
| GHSA-p2j5-3f4c-224r Improper Input Validation in HashiCorp Consul |
Medium EPSS 1.77% |
>= 1.7.0, < 1.7.4 | 1.7.4 |
| GHSA-p2j5-3f4c-224r Improper Input Validation in HashiCorp Consul |
Medium EPSS 1.77% |
>= 1.6.0-beta1, < 1.6.6 | 1.6.6 |
| GHSA-23jv-v6qj-3fhh Denial of Service (DoS) in HashiCorp Consul |
High EPSS 2.04% |
< 1.6.3 | 1.6.3 |
| GHSA-23jv-v6qj-3fhh Denial of Service (DoS) in HashiCorp Consul |
High EPSS 2.04% |
< 1.6.3 | 1.6.3 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor