github.com/hashicorp/consul vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-2808Mediumgithub.com/hashicorp/consul: Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication CVE-2025-11375Mediumgithub.com/hashicorp/consul: Consul event endpoint is vulnerable to denial of service CVE-2025-11374Mediumgithub.com/hashicorp/consul: Consul key/value endpoint is vulnerable to denial of service CVE-2024-10006Mediumgithub.com/hashicorp/consul: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability CVE-2024-10005Highgithub.com/hashicorp/consul: Hashicorp Consul Path Traversal vulnerability CVE-2024-10086Mediumgithub.com/hashicorp/consul: Hashicorp Consul Cross-site Scripting vulnerability CVE-2020-28053Mediumgithub.com/hashicorp/consul: Privilege Escalation in HashiCorp Consul CVE-2020-25201Highgithub.com/hashicorp/consul: Denial of service in HashiCorp Consul CVE-2023-3518Highgithub.com/hashicorp/consul: Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers CVE-2019-12291Highgithub.com/hashicorp/consul: HashiCorp Consul Incorrect Access Control vulnerability CVE-2023-1297Mediumgithub.com/hashicorp/consul: Hashicorp Consul vulnerable to denial of service CVE-2023-2816Highgithub.com/hashicorp/consul: Hashicorp Consul allows user with service:write permissions to patch remote proxy instances CVE-2023-0845Mediumgithub.com/hashicorp/consul: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections CVE-2022-3920Highgithub.com/hashicorp/consul: Missing Authorization in HashiCorp Consul CVE-2022-40716Mediumgithub.com/hashicorp/consul: HashiCorp Consul vulnerable to authorization bypass CVE-2021-41803Highgithub.com/hashicorp/consul: HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim…CVE-2020-25864Mediumgithub.com/hashicorp/consul: HashiCorp Consul Cross-site Scripting vulnerability CVE-2018-19653Mediumgithub.com/hashicorp/consul: HashiCorp Consul can use cleartext agent-to-agent RPC communication CVE-2019-9764Highgithub.com/hashicorp/consul: HashiCorp Consul vulnerable to Origin Validation Error CVE-2019-8336Highgithub.com/hashicorp/consul: HashiCorp Consul Access Restriction Bypass CVE-2022-29153Highgithub.com/hashicorp/consul: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector CVE-2022-24687Mediumgithub.com/hashicorp/consul: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers CVE-2020-12758Mediumgithub.com/hashicorp/consul: Denial of Service (DoS) in HashiCorp Consul CVE-2021-38698Mediumgithub.com/hashicorp/consul: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register…CVE-2021-37219Highgithub.com/hashicorp/consul: HashiCorp Consul Privilege Escalation Vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo