[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuPWjt7a3dOp3Md5RNoOvp-DRoUSJTmgimB-nu1ZZohg":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":127,"kevVulnerabilities":187,"topProductsByCves":188,"seoMetadata":199,"meta":208},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":126},13198,"hashicorp",22,168,0,1438,"2025-08-01","h",[16,21,27,33,39,45,51,57,62,67,72,78,83,88,93,97,101,106,110,114,118,123],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},53666,"vault",248,64,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},53650,"consul",182,33,"2024-10-30",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},53656,"nomad",165,29,"2025-05-13",{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":11,"last_cve_update":38},53664,"vagrant_vmware_fusion",48,7,"2018-03-29",{"id":40,"product_name":41,"version_count":42,"cve_count":43,"kev_count":11,"last_cve_update":44},53653,"go-getter",32,6,"2023-02-16",{"id":46,"product_name":47,"version_count":48,"cve_count":49,"kev_count":11,"last_cve_update":50},53661,"terraform_enterprise",25,5,"2023-06-22",{"id":52,"product_name":53,"version_count":54,"cve_count":55,"kev_count":11,"last_cve_update":56},53649,"boundary",47,4,"2024-02-05",{"id":58,"product_name":59,"version_count":60,"cve_count":55,"kev_count":11,"last_cve_update":61},53660,"terraform",163,"2023-09-08",{"id":63,"product_name":64,"version_count":65,"cve_count":55,"kev_count":11,"last_cve_update":66},53663,"vagrant",157,"2023-10-27",{"id":68,"product_name":69,"version_count":42,"cve_count":70,"kev_count":11,"last_cve_update":71},53659,"sentinel",2,"2022-03-23",{"id":73,"product_name":74,"version_count":75,"cve_count":76,"kev_count":11,"last_cve_update":77},53669,"vault-ssh-helper",8,1,"2020-08-20",{"id":79,"product_name":80,"version_count":81,"cve_count":76,"kev_count":11,"last_cve_update":82},53654,"go-slug",45,"2020-12-03",{"id":84,"product_name":85,"version_count":86,"cve_count":76,"kev_count":11,"last_cve_update":87},53662,"terraform_provider",43,"2021-04-22",{"id":89,"product_name":90,"version_count":91,"cve_count":76,"kev_count":11,"last_cve_update":92},53657,"packer",90,"2018-08-25",{"id":94,"product_name":95,"version_count":76,"cve_count":76,"kev_count":11,"last_cve_update":96},53668,"vault_provider_for_secrets_store_csi_driver","2021-01-21",{"id":98,"product_name":99,"version_count":9,"cve_count":76,"kev_count":11,"last_cve_update":100},53658,"retryablehttp","2024-06-24",{"id":102,"product_name":103,"version_count":104,"cve_count":76,"kev_count":11,"last_cve_update":105},53652,"consul_template",59,"2022-08-17",{"id":107,"product_name":108,"version_count":76,"cve_count":76,"kev_count":11,"last_cve_update":109},53665,"vagrant_vmware_utility","2024-10-29",{"id":111,"product_name":112,"version_count":25,"cve_count":76,"kev_count":11,"last_cve_update":113},53651,"consul_docker_image","2020-12-08",{"id":115,"product_name":116,"version_count":48,"cve_count":76,"kev_count":11,"last_cve_update":117},53667,"vault-action","2021-05-07",{"id":119,"product_name":120,"version_count":121,"cve_count":11,"kev_count":11,"last_cve_update":122},53670,"waypoint",11,null,{"id":124,"product_name":125,"version_count":76,"cve_count":11,"kev_count":11,"last_cve_update":122},53655,"hermes","Hashicorp is a technology vendor with 22 tracked products and 168 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[128,137,143,149,156,160,166,171,176,181],{"cveId":129,"description":130,"publishedDate":131,"cvssScore":132,"cvssVersion":133,"severity":134,"isKev":135,"epssScore":136},"CVE-2021-41805","HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token (with the default operator:write permissions) in one namespace can be used for unintended privilege escalation in a different namespace.","2021-12-12",8.8,"v3.1","High",false,0.3479,{"cveId":138,"description":139,"publishedDate":140,"cvssScore":141,"cvssVersion":133,"severity":134,"isKev":135,"epssScore":142},"CVE-2022-29153","HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent follows redirects returned by HTTP health check endpoints. Fixed in 1.9.17, 1.10.10, and 1.11.5.","2022-04-19",7.5,0.08746,{"cveId":144,"description":145,"publishedDate":113,"cvssScore":146,"cvssVersion":133,"severity":147,"isKev":135,"epssScore":148},"CVE-2020-29564","The official Consul Docker images 0.7.1 through 1.4.2 contain a blank password for a root user. System using the Consul Docker container deployed by affected versions of the Docker image may allow a remote attacker to achieve root access with a blank password.",9.8,"Critical",0.06172,{"cveId":150,"description":151,"publishedDate":152,"cvssScore":153,"cvssVersion":133,"severity":154,"isKev":135,"epssScore":155},"CVE-2020-25864","HashiCorp Consul and Consul Enterprise up to version 1.9.4 key-value (KV) raw mode was vulnerable to cross-site scripting. Fixed in 1.9.5, 1.8.10 and 1.7.14.","2021-04-20",6.1,"Medium",0.06068,{"cveId":157,"description":158,"publishedDate":71,"cvssScore":141,"cvssVersion":133,"severity":134,"isKev":135,"epssScore":159},"CVE-2021-44139","Sentinel 1.8.2 is vulnerable to Server-side request forgery (SSRF).",0.05643,{"cveId":161,"description":162,"publishedDate":163,"cvssScore":164,"cvssVersion":133,"severity":134,"isKev":135,"epssScore":165},"CVE-2021-3121","An issue was discovered in GoGo Protobuf before 1.3.2. plugin\u002Funmarshal\u002Funmarshal.go lacks certain index validation, aka the \"skippy peanut butter\" issue.","2021-01-11",8.6,0.03425,{"cveId":167,"description":168,"publishedDate":169,"cvssScore":164,"cvssVersion":133,"severity":134,"isKev":135,"epssScore":170},"CVE-2022-30321","go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws. Fixed in 1.6.1 and 2.1.0.","2022-05-25",0.03114,{"cveId":172,"description":173,"publishedDate":174,"cvssScore":146,"cvssVersion":133,"severity":147,"isKev":135,"epssScore":175},"CVE-2020-35192","The official vault docker images before 0.11.6 contain a blank password for a root user. System using the vault docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.","2020-12-17",0.02918,{"cveId":177,"description":178,"publishedDate":179,"cvssScore":141,"cvssVersion":133,"severity":134,"isKev":135,"epssScore":180},"CVE-2020-13250","HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.","2020-06-11",0.02851,{"cveId":182,"description":183,"publishedDate":184,"cvssScore":185,"cvssVersion":133,"severity":134,"isKev":135,"epssScore":186},"CVE-2020-16251","HashiCorp Vault and Vault Enterprise versions 0.8.3 and newer, when configured with the GCP GCE auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1.","2020-08-26",8.2,0.02828,[],[189,190,191,192,193,194,195,196,197,198],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":11,"last_cve_update":38},{"id":40,"product_name":41,"version_count":42,"cve_count":43,"kev_count":11,"last_cve_update":44},{"id":46,"product_name":47,"version_count":48,"cve_count":49,"kev_count":11,"last_cve_update":50},{"id":52,"product_name":53,"version_count":54,"cve_count":55,"kev_count":11,"last_cve_update":56},{"id":58,"product_name":59,"version_count":60,"cve_count":55,"kev_count":11,"last_cve_update":61},{"id":63,"product_name":64,"version_count":65,"cve_count":55,"kev_count":11,"last_cve_update":66},{"id":68,"product_name":69,"version_count":42,"cve_count":70,"kev_count":11,"last_cve_update":71},{"title":200,"metaDescription":201,"keywords":202,"structuredData":203},"Hashicorp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Hashicorp covering 22 products with 168 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Hashicorp vulnerabilities, Hashicorp security, Hashicorp CVE, Hashicorp threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":204,"@type":205,"name":206,"description":201,"url":207},"https:\u002F\u002Fschema.org","Organization","Hashicorp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fhashicorp",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":209,"apiVersion":210},"2026-10-19T17:58:01.646Z","3.0"]