Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:golang/github.com/hashicorp/consul@1.10.2
purl pkg:golang/github.com/hashicorp/consul@1.10.2
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-9wyg-uv2p-d3ez HashiCorp Consul Privilege Escalation Vulnerability HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2. CVE-2021-37219
GHSA-ccw8-7688-vqx4
VCID-tgcs-1brz-6yf4 HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. Fixed in 1.8.15, 1.9.9 and 1.10.2. CVE-2021-38698
GHSA-6hw5-6gcx-phmw

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:01:02.804959+00:00 GithubOSV Importer Fixing VCID-9wyg-uv2p-d3ez https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-ccw8-7688-vqx4/GHSA-ccw8-7688-vqx4.json 38.0.0
2026-04-01T13:00:56.132499+00:00 GithubOSV Importer Fixing VCID-tgcs-1brz-6yf4 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-6hw5-6gcx-phmw/GHSA-6hw5-6gcx-phmw.json 38.0.0