{"action":"Upgrade github.com/hashicorp/consul to 1.8.15 or later.","affected":[{"fixed":"1.10.2","introduced":"1.10.1"},{"fixed":"1.9.9","introduced":"1.9.0"},{"fixed":"1.8.15","introduced":"0"}],"component":"github.com/hashicorp/consul","cve_ids":["CVE-2021-37219"],"ecosystem":"Go","epss":0.01149,"exploited":false,"fixed_versions":["1.10.2","1.9.9","1.8.15"],"ghsa_id":"GHSA-ccw8-7688-vqx4","id":"tcs_01M5KF75P77WTTP38D2QYN391Z","modified_at":"2026-09-10T03:49:08.760839466Z","published_at":"2021-09-08T20:14:48Z","references":["https://osv.dev/vulnerability/GHSA-ccw8-7688-vqx4","https://nvd.nist.gov/vuln/detail/CVE-2021-37219","https://github.com/hashicorp/consul/pull/10925","https://github.com/hashicorp/consul/commit/3357e57dac9aadabd476f7a14973e47f003c4cf0","https://github.com/hashicorp/consul/commit/473edd1764b6739e2e4610ea5dede4c2bc6009d1","https://github.com/hashicorp/consul/commit/ccf8eb1947357434eb6e66303ddab79f4c9d4103","https://discuss.hashicorp.com/t/hcsec-2021-22-consul-raft-rpc-privilege-escalation/29024","https://github.com/hashicorp/consul","https://security.gentoo.org/glsa/202207-01","https://www.hashicorp.com/blog/category/consul"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-ccw8-7688-vqx4","url":"https://osv.dev/vulnerability/GHSA-ccw8-7688-vqx4"}],"summary":"HashiCorp Consul Privilege Escalation Vulnerability"}