HIGH7.5Go
GHSA-23jv-v6qj-3fhh· BIT-consul-2020-7219, CVE-2020-7219Denial of Service (DoS) in HashiCorp Consul
Modified: 9/10/2026
package
Go/github.com/hashicorp/consul
pkg:go/github.com/hashicorp/consul
HIGH7.5Go
GHSA-25gf-8qrr-g78r· BIT-consul-2021-32574, CVE-2021-32574Hashicorp Consul Missing SSL Certificate Validation
Modified: 9/10/2026
HIGH7.5Go
GHSA-496g-fr33-whrf· BIT-consul-2020-25201, CVE-2020-25201Denial of service in HashiCorp Consul
Modified: 6/28/2024
MEDIUM5.9Go
GHSA-4qvx-qq5w-695p· CVE-2018-19653, GO-2023-1850HashiCorp Consul can use cleartext agent-to-agent RPC communication
Modified: 9/10/2026
HIGH8.3Go
GHSA-5c4w-8hhh-3c3h· BIT-consul-2024-10006, CVE-2024-10006Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-6hw5-6gcx-phmw· BIT-consul-2021-38698, CVE-2021-38698HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic.
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-6m72-467w-94rh· BIT-consul-2020-28053, CVE-2020-28053Privilege Escalation in HashiCorp Consul
Modified: 6/28/2024
MEDIUM6.5Go
GHSA-7g3r-8c6v-hfmr· BIT-consul-2025-11374, CVE-2025-11374Consul key/value endpoint is vulnerable to denial of service
Modified: 9/10/2026
HIGH7.5Go
GHSA-8h2g-r292-j8xh· BIT-consul-2021-36213, CVE-2021-36213HashiCorp Consul L7 deny intention results in an allow action
Modified: 9/10/2026
MEDIUM6.1Go
GHSA-8xmx-h8rq-h94j· BIT-consul-2020-25864, CVE-2020-25864HashiCorp Consul Cross-site Scripting vulnerability
Modified: 9/10/2026
MEDIUM6.1Go
GHSA-99wr-c2px-grmh· BIT-consul-2024-10086, CVE-2024-10086Hashicorp Consul Cross-site Scripting vulnerability
Modified: 9/10/2026
HIGH7.4Go
GHSA-9rhf-q362-77mx· BIT-consul-2023-3518, CVE-2023-3518Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers
Modified: 8/7/2026
MEDIUM4.9Go
GHSA-c57c-7hrj-6q6v· BIT-consul-2023-1297, CVE-2023-1297Hashicorp Consul vulnerable to denial of service
Modified: 9/10/2026
HIGH8.8Go
GHSA-ccw8-7688-vqx4· BIT-consul-2021-37219, CVE-2021-37219HashiCorp Consul Privilege Escalation Vulnerability
Modified: 9/10/2026
HIGH8.1Go
GHSA-chgm-7r52-whjj· BIT-consul-2024-10005, CVE-2024-10005Hashicorp Consul Path Traversal vulnerability
Modified: 9/10/2026
MEDIUM6.8Go
GHSA-cpfq-66p2-336j· BIT-consul-2026-2808, CVE-2026-2808Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication
Modified: 3/24/2026
HIGH8.1Go
GHSA-fhm8-cxcv-pwvc· CVE-2019-8336, GO-2023-1945HashiCorp Consul Access Restriction Bypass
Modified: 8/20/2024
HIGH7.5Go
GHSA-gw2g-hhc9-wgjh· BIT-consul-2022-3920, CVE-2022-3920Missing Authorization in HashiCorp Consul
Modified: 8/7/2026
HIGH7.5Go
GHSA-h65h-v7fw-4p38· CVE-2019-12291, GO-2023-1852HashiCorp Consul Incorrect Access Control vulnerability
Modified: 8/20/2024
MEDIUM6.5Go
GHSA-hj93-5fg3-3chr· BIT-consul-2022-24687, CVE-2022-24687HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers
Modified: 8/21/2024
HIGH7.1Go
GHSA-hr3v-8cp3-68rf· BIT-consul-2021-41803, CVE-2021-41803HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions
Modified: 8/7/2026
MEDIUM5.3Go
GHSA-hwqm-x785-qh8p· BIT-consul-2020-12797, CVE-2020-12797Incorrect Permission Assignment for Critical Resource in Hashicorp Consul
Modified: 8/21/2024
MEDIUM6.5Go
GHSA-m69r-9g56-7mv8· BIT-consul-2022-40716, CVE-2022-40716HashiCorp Consul vulnerable to authorization bypass
Modified: 9/10/2026
MEDIUM5.3Go
GHSA-p2j5-3f4c-224r· BIT-consul-2020-13170, CVE-2020-13170Improper Input Validation in HashiCorp Consul
Modified: 8/21/2024
MEDIUM5.3Go
GHSA-q2qr-3c2p-9235· BIT-consul-2020-12758, CVE-2020-12758Denial of Service (DoS) in HashiCorp Consul
Modified: 8/21/2024
HIGH7.5Go
GHSA-q6h7-4qgw-2j9p· BIT-consul-2022-29153, CVE-2022-29153Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector
Modified: 9/10/2026
HIGH7.4Go
GHSA-q7fx-wm2p-qfj8· CVE-2019-9764, GO-2023-1853HashiCorp Consul vulnerable to Origin Validation Error
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-qh7p-pfq3-677h· BIT-consul-2025-11375, CVE-2025-11375Consul event endpoint is vulnerable to denial of service
Modified: 9/10/2026
MEDIUM5.3Go
GHSA-r9w6-rhh9-7v53· BIT-consul-2020-7955, CVE-2020-7955Incorrect Authorization in HashiCorp Consul
Modified: 8/21/2024
HIGH7.5Go
GHSA-rqjq-mrgx-85hp· BIT-consul-2020-13250, CVE-2020-13250Allocation of Resources Without Limits or Throttling in Hashicorp Consul
Modified: 8/21/2024
HIGH8.7Go
GHSA-rqjq-ww83-wv5c· BIT-consul-2023-2816, CVE-2023-2816Hashicorp Consul allows user with service:write permissions to patch remote proxy instances
Modified: 8/20/2024
MEDIUM6.5Go
GHSA-wj6x-hcc2-f32j· BIT-consul-2023-0845, CVE-2023-0845Consul Server Panic when Ingress and API Gateways Configured with Peering Connections
Modified: 8/7/2026
—Go
GO-2022-0559· BIT-consul-2021-38698, CVE-2021-38698HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2022-0593· BIT-consul-2021-37219, CVE-2021-37219HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2022-0615· BIT-consul-2022-29153, CVE-2022-29153Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2022-0776· BIT-consul-2020-7219, CVE-2020-7219Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2022-0847· BIT-consul-2020-12797, CVE-2020-12797Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul
Modified: 3/3/2026
—Go
GO-2022-0859· BIT-consul-2020-13170, CVE-2020-13170Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul
Modified: 3/3/2026
—Go
GO-2022-0861· BIT-consul-2020-12758, CVE-2020-12758Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul
Modified: 3/3/2026
—Go
GO-2022-0874· BIT-consul-2020-7955, CVE-2020-7955Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul
Modified: 3/3/2026
—Go
GO-2022-0879· BIT-consul-2020-13250, CVE-2020-13250Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul
Modified: 3/3/2026
—Go
GO-2022-0894· BIT-consul-2021-32574, CVE-2021-32574Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2022-0895· BIT-consul-2021-36213, CVE-2021-36213HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2022-0953· BIT-consul-2022-24687, CVE-2022-24687HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul
Modified: 3/3/2026
—Go
GO-2022-1029· BIT-consul-2022-40716, CVE-2022-40716HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2022-1121· BIT-consul-2022-3920, CVE-2022-3920Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul
Modified: 8/7/2026
—Go
GO-2023-1639· BIT-consul-2023-0845, CVE-2023-0845Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul
Modified: 8/7/2026
—Go
GO-2023-1827· BIT-consul-2023-1297, CVE-2023-1297Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2023-1828· BIT-consul-2023-2816, CVE-2023-2816Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul
Modified: 3/3/2026
—Go
GO-2023-1850· CVE-2018-19653, GHSA-4qvx-qq5w-695pHashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2023-1851· BIT-consul-2020-25864, CVE-2020-25864HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2023-1852· CVE-2019-12291, GHSA-h65h-v7fw-4p38HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul
Modified: 3/3/2026
—Go
GO-2023-1853· CVE-2019-9764, GHSA-q7fx-wm2p-qfj8HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2023-1945· CVE-2019-8336, GHSA-fhm8-cxcv-pwvcHashiCorp Consul Access Restriction Bypass in github.com/hashicorp/consul
Modified: 3/3/2026
—Go
GO-2024-2501· BIT-consul-2020-25201, CVE-2020-25201Denial of service in HashiCorp Consul in github.com/hashicorp/consul
Modified: 3/3/2026
—Go
GO-2024-2505· BIT-consul-2020-28053, CVE-2020-28053Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul
Modified: 3/3/2026
—Go
GO-2024-2683· BIT-consul-2021-41803, CVE-2021-41803Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul
Modified: 8/7/2026
—Go
GO-2024-2704· BIT-consul-2023-3518, CVE-2023-3518Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers in github.com/hashicorp/consul
Modified: 8/7/2026
—Go
GO-2024-3241· BIT-consul-2024-10006, CVE-2024-10006Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2024-3242· BIT-consul-2024-10086, CVE-2024-10086Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2024-3243· BIT-consul-2024-10005, CVE-2024-10005Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2025-4081· BIT-consul-2025-11374, CVE-2025-11374Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2025-4082· BIT-consul-2025-11375, CVE-2025-11375Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul
Modified: 2/4/2026
—Go
GO-2026-4690· BIT-consul-2026-2808, CVE-2026-2808Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul
Modified: 3/16/2026