Vendor
HashiCorp
139 known vulnerabilities.
Products
Vault Enterprise 49
Vault 43
Consul 27
Consul Enterprise 27
Nomad Enterprise 26
Nomad 24
Tooling 13
Shared library 10
Boundary 5
Boundary Enterprise 4
Terraform Enterprise 3
Vagrant 2
go-slug 1
Packer 1
Terraform 1
go-getter 1
Vagrant < 2.4.0 0
Vault < 1.11.3 0
Vault < 1.10.6 0
Vault < 1.9.9 0
Vault < 1.13.2 0
Vault < 1.13.1 0
Vault < 1.12.5 0
Vault < 1.11.9 0
Terraform Enterprise < v202306-1 0
Vault < 1.15.5 0
Terraform < 1.5.7 0
Vault < 1.13.0 0
Vault < 1.12.4 0
Vault < 1.11.8 0
Vault < 1.10.11 0
Vault < 1.14.0 0
Vault < 1.11.11 0
Vault < 1.12.7 0
Vault < 1.13.3 0
Vault < 1.14.3 0
Vault < 1.13.7 0
Vault < 1.7.6 0
Vault < 1.12.11 0
Vault < 1.8.5 0
2 results · Clear filters · Feed
-
High 7.5CVE-2026-4660 Public exploit
Go-getter may allow to arbitrary filesystem reads through git operations
HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CVE-2026-4660, is fixed in go-getter v1.8.6. This vulnerability does not affect t…
-
High 8.1CVE-2024-10005 Public exploit
Consul L7 Intentions Vulnerable To URL Path Bypass
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.