| CVE-2026-110720 |
Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding…
|
9.9
Critique
|
26 oct. 2026 |
| CVE-2026-87993 |
The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow…
|
7.7
Élevée
|
10 sept. 2026 |
| CVE-2026-8715 |
Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in…
|
9.6
Critique
|
13 août 2026 |
| CVE-2026-16326 |
In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may…
|
10.0
Critique
|
29 juil. 2026 |
| CVE-2026-16328 |
In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address was supplied,…
|
8.6
Élevée
|
29 juil. 2026 |
| CVE-2026-16498 |
The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the…
|
10.0
Critique
|
28 juil. 2026 |
| CVE-2026-16496 |
The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful…
|
8.9
Élevée
|
28 juil. 2026 |
| CVE-2026-14869 |
The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the…
|
8.6
Élevée
|
28 juil. 2026 |
| CVE-2026-14361 |
The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile…
|
4.7
Moyenne
|
8 juil. 2026 |
| CVE-2026-5061 |
The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper…
|
4.7
Moyenne
|
12 mai 2026 |
| CVE-2026-4660 |
HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git…
|
7.5
Élevée
|
9 avr. 2026 |
| CVE-2025-13357 |
Vault’s Terraform Provider incorrectly set the default deny_null_bind parameter for the LDAP auth method to false by…
|
7.4
Élevée
|
21 nov. 2025 |
| CVE-2025-1293 |
Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode,…
|
8.2
Élevée
|
20 févr. 2025 |