Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:golang/github.com/hashicorp/consul@1.16.0
purl pkg:golang/github.com/hashicorp/consul@1.16.0
Next non-vulnerable version 1.16.1
Latest non-vulnerable version 1.22.5
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-4rvd-1dka-vufc
Aliases:
CVE-2023-3518
GHSA-9rhf-q362-77mx
Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers A vulnerability was identified in Consul such that using JWT authentication for service mesh incorrectly allows/denies access regardless of service identities. This vulnerability, CVE-2023-3518, affects Consul 1.16.0 and was fixed in 1.16.1.
1.16.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:58:27.339509+00:00 GithubOSV Importer Affected by VCID-4rvd-1dka-vufc https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/08/GHSA-9rhf-q362-77mx/GHSA-9rhf-q362-77mx.json 38.0.0