Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:golang/github.com/hashicorp/consul@1.22.5
purl pkg:golang/github.com/hashicorp/consul@1.22.5
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-c3xs-zedn-cbhc Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. This vulnerability, CVE-2026-2808, is fixed in Consul 1.18.21, 1.21.11 and 1.22.5. CVE-2026-2808
GHSA-cpfq-66p2-336j

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:54:11.771756+00:00 GithubOSV Importer Fixing VCID-c3xs-zedn-cbhc https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-cpfq-66p2-336j/GHSA-cpfq-66p2-336j.json 38.0.0