Most recent entries from all

bdu:2024-10201

BIT-consul-2024-10005 — Consul L7 Intentions Vulnerable To URL Path Bypass

Affected: Bitnami: consul

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.

Withdrawn: CLEANSTART-2026-AD71344 — Security fixes for CVE-2024-10005, CVE-2024-10006, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-61727, CVE-…

Withdrawn by the publisher.

Affected: CleanStart: opentofu-fips

Multiple security vulnerabilities affect the opentofu-fips package. These issues are resolved in later releases. See references for individual vulnerability details.

EUVD-2026-209950

fkie_cve-2024-10005

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.

GHSA-chgm-7r52-whjj — Hashicorp Consul Path Traversal vulnerability

Affected: Go: github.com/hashicorp/consul

A vulnerability was identified in Consul and Consul Enterprise ("Consul") such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.

openSUSE-SU-2024:0350-1 — Security update for govulncheck-vulndb

Security update for govulncheck-vulndb

RHSA-2025:15847 — Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.23.0 Release.

hashicorp/consul: consul: Consul L7 Intentions Vulnerable To URL Path Bypass hashicorp/consul: consul: Consul L7 Intentions Vulnerable To Headers Bypass quic-go: memory exhaustion attack against QUIC's connection ID mechanism golang: archive/zip: Incorrect handling of certain ZIP files traefik: denial of service traefik: Bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html cipher-base: Cipher-base hash manipulation sha.js: Missing type checks leading to hash rewind and passing on crafted data git: Git arbitrary file writes tar-fs: tar-fs has issue where extract can write outside the specified dir with a specific tarball com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

SUSE-SU-2024:3950-1 — Security update for govulncheck-vulndb

Security update for govulncheck-vulndb

UBUNTU-CVE-2024-10005

Affected: Ubuntu:18.04:LTS: consul, Ubuntu:20.04:LTS: consul, Ubuntu:22.04:LTS: consul

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.