AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

HashiCorp security advisories

33 advisories · 17 critical or high in 12 months · latest Oct 26

Advisories page

33 advisories

Critical 9.9Oct 26HashiCorp Tooling: improper authorizationCVE-2026-110720fixed in 2.0.4High 7.5Oct 26HashiCorp Consul: missing authorizationCVE-2026-105765fixed in 2.1.0 +1Medium 6.7Sep 15HashiCorp Shared library: privilege escalationCVE-2026-88922fixed in 2.2.4High 7.7Sep 10HashiCorp Tooling: information disclosureCVE-2026-87993fixed in 0.43.0High 7.1Sep 10Consul and Consul Enterprise are vulnerable to an authorization bypass in the...CVE-2026-88021fixed in 2.0.4 +1High 8.3Sep 10HashiCorp Consul: improper authorizationCVE-2026-87090fixed in 2.0.4 +1Medium 6.5Sep 10HashiCorp Consul: denial of serviceCVE-2026-87106fixed in 2.0.4 +1Medium 5.4Sep 10HashiCorp Consul: improper authorizationCVE-2026-87107fixed in 2.0.4 +1Medium 6.8Aug 24HashiCorp Vault: insecure direct object referenceCVE-2026-5006fixed in 2.0.4 +1High 7.1Aug 17HashiCorp Packer: code executionCVE-2026-19589fixed in 1.16.0Critical 9.6Aug 13HashiCorp Tooling: arbitrary file readCVE-2026-8715fixed in 1.5.0High 8.2Aug 10HashiCorp Vault Enterprise: missing authorizationCVE-2026-14886fixed in 2.0.4Medium 4.3Aug 10HashiCorp Vault: improper authorizationCVE-2026-12624fixed in 2.0.3 +1High 7.5Aug 7HashiCorp Consul: denial of serviceCVE-2026-15972fixed in 2.0.3 +1Medium 5.3Aug 7HashiCorp Consul: denial of serviceCVE-2026-19012fixed in 2.0.3 +1Medium 4.3Aug 7HashiCorp Consul: resource exhaustionCVE-2026-19014fixed in 2.0.3 +1Medium 5.3Aug 7HashiCorp Consul: resource exhaustionCVE-2026-19015fixed in 2.0.3 +1Medium 4.2Aug 7HashiCorp Consul: path traversalCVE-2026-19016fixed in 2.0.3 +1Medium 6.8Aug 7HashiCorp Consul: arbitrary file readCVE-2026-19017fixed in 2.0.3 +1Medium 5.3Aug 7HashiCorp Consul: denial of serviceCVE-2026-19113fixed in 2.0.3 +1Medium 4.2Aug 7Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are...CVE-2026-15970fixed in 2.0.3 +1High 8.6Jul 29HashiCorp Tooling: server-side request forgeryCVE-2026-16328fixed in 0.1.4Critical 10.0Jul 29In consul-mcp-serverCVE-2026-16326fixed in 0.1.4Critical 10.0Jul 28The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant...CVE-2026-16498fixed in 1.1.0High 8.6Jul 28HashiCorp Tooling: server-side request forgeryCVE-2026-14869fixed in 1.1.0High 8.9Jul 28HashiCorp Tooling: session fixationCVE-2026-16496fixed in 1.1.0Medium 4.2Jul 8HashiCorp Nomad: improper authorizationCVE-2026-14896fixed in 2.0.4 +1High 7.7Jul 8HashiCorp Nomad: missing authorizationCVE-2026-14373fixed in 2.0.4 +1High 8.7Jul 8HashiCorp Nomad: link followingCVE-2026-14891fixed in 2.0.4 +1Medium 4.7Jul 8HashiCorp Tooling: link followingCVE-2026-14361fixed in 0.42.1Medium 4.9Jul 8HashiCorp Shared library: denial of serviceCVE-2026-14362fixed in 0.6.0High 7.7Jul 6HashiCorp Terraform Enterprise: path traversalCVE-2026-14468fixed in 2.0.4Medium 4.4Jul 1HashiCorp Vault: path traversalCVE-2026-5051fixed in 2.0.1 +1
About HashiCorp

Security advisories HashiCorp publishes for its own products.

discuss.hashicorp.com/c/security/52HashiCorp

HashiCorp elsewhere on Ibis: Acquisitions · Paydays · Releases · Repos · TechConf