Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
hashicorp/consul
main @ 6fee149
253
Fixes
36
CVEs
CRITICAL
Peak severity
22.9%
Coverage
Highlights
Auth Bypass: 129 prior fixes. Scrutinize any change in this area.
agent: most-fixed (24 issues). Treat as high-risk during review.
103 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Inconsistent URL path normalization and header matching logic in L7 traffic intentions let attackers bypass policy-based routing controls.
Auth Bypass: Mutations processed via the transaction endpoint could bypass authorization by checking a request-provided service name while writing changes based on a distinct ID.
Path Traversal: Improper sanitation of KV store key inputs and double-unescaping of path suffixes allowed attackers to traverse path boundaries on HTTP endpoints.