consul-1.15 vulnerabilities

Known vulnerabilities in the consul-1.15 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L CVE-2024-24791	<1.15.11-r7
L GHSA-hw49-2p59-3mhj	<1.15.11-r7
M Information Exposure Through Log Files	<1.15.11-r6
L GHSA-v6v8-xj6m-xwqh	<1.15.11-r6
H CVE-2021-36213	<1.15.11-r5
H Improper Certificate Validation	<1.15.11-r5
L GHSA-q6h7-4qgw-2j9p	<1.15.11-r5
M Missing Authorization	<1.15.11-r5
H Allocation of Resources Without Limits or Throttling	<1.15.11-r5
M Cross-site Scripting (XSS)	<1.15.11-r5
H Origin Validation Error	<1.15.11-r5
L GHSA-25gf-8qrr-g78r	<1.15.11-r5
L GHSA-ccw8-7688-vqx4	<1.15.11-r5
L GHSA-6hw5-6gcx-phmw	<1.15.11-r5
H Improper Certificate Validation	<1.15.11-r5
L GHSA-8xmx-h8rq-h94j	<1.15.11-r5
L GHSA-8h2g-r292-j8xh	<1.15.11-r5
L GHSA-q7fx-wm2p-qfj8	<1.15.11-r5
H Server-Side Request Forgery (SSRF)	<1.15.11-r5
L GHSA-23jv-v6qj-3fhh	<1.15.11-r5
M CVE-2024-24789	<1.15.11-r5
L GHSA-49gw-vxvf-fc2g	<1.15.11-r5
L GHSA-236w-p7wf-5ph8	<1.15.11-r5
C CVE-2024-24790	<1.15.11-r5
L GHSA-m9w6-wp3h-vq8g	<1.15.11-r2
L Information Exposure Through Caching	<1.15.11-r2
L CVE-2023-45288	<1.15.11-r2
L GHSA-4v7x-pqxf-cx7m	<1.15.11-r2
L GHSA-8r3f-844c-mc37	<1.15.10-r2
L CVE-2024-24786	<1.15.10-r2
L GHSA-3q2c-pvp5-3cqp	<1.15.10-r1
L CVE-2024-24783	<1.15.10-r1
L GHSA-j6m3-gc37-6r6q	<1.15.10-r1
L GHSA-rr6r-cfgf-gc6h	<1.15.10-r1
L GHSA-fgq5-q76c-gx78	<1.15.10-r1
L CVE-2023-45290	<1.15.10-r1
L CVE-2023-45289	<1.15.10-r1
L CVE-2024-24785	<1.15.10-r1
L CVE-2024-24784	<1.15.10-r1
L GHSA-32ch-6x54-q4h9	<1.15.10-r1
M Improper Validation of Integrity Check Value	<1.15.8-r1
L GHSA-45x7-px36-x8w8	<1.15.8-r1
L GHSA-wj6x-hcc2-f32j	<1.15.5-r0
L GHSA-2wrh-6pvc-2jm9	<1.15.6-r3
L GHSA-4374-p667-p6c8	<1.15.6-r3
L GHSA-gw2g-hhc9-wgjh	<1.15.5-r0
M Cross-site Scripting (XSS)	<1.15.6-r3
H Allocation of Resources Without Limits or Throttling	<1.15.6-r3
H Missing Authorization	<1.15.5-r0
M NULL Pointer Dereference	<1.15.5-r0

Vulnerability

Vulnerable Version

CVE-2024-24791

<1.15.11-r7

GHSA-hw49-2p59-3mhj

<1.15.11-r7

Information Exposure Through Log Files

<1.15.11-r6

GHSA-v6v8-xj6m-xwqh

<1.15.11-r6

CVE-2021-36213

<1.15.11-r5