Alpine/consul: high 7.5

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.

Action: Upgrade consul to 1.9.5-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2021-28156#Alpine:v3.14/consul
• https://security.alpinelinux.org/vuln/CVE-2021-28156

published 2021-04-20T16:15:10.407Z · modified 2026-11-03T06:32:38.725064445Z · JSON