Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/consul@1.4.5%2Bdfsg1-1?distro=bullseye
purl pkg:deb/debian/consul@1.4.5%2Bdfsg1-1?distro=bullseye
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-467g-8bds-t3ef HashiCorp Consul Incorrect Access Control vulnerability HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Control. Keys not matching a specific ACL rule used for prefix matching in a policy can be deleted by a token using that policy even with default deny settings configured. ### Specific Go Packages Affected github.com/hashicorp/consul/acl CVE-2019-12291
GHSA-h65h-v7fw-4p38

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:14:03.067604+00:00 Debian Importer Fixing VCID-467g-8bds-t3ef https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:22:09.585530+00:00 Debian Importer Fixing VCID-467g-8bds-t3ef https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:14:09.503972+00:00 Debian Importer Fixing VCID-467g-8bds-t3ef https://security-tracker.debian.org/tracker/data/json 38.1.0