GO-2025-4082
NoneCVSS
—
EPSS
—
Published
Nov 5, 2025
CISA due date
—
The record
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/hashicorp/consul | 0 | 1.22.0 |
| Bitnami | consul | 0 | 1.22.0 |
| Chainguard | consul-1.18-oci-entrypoint | 0 | 1.18.2-r45 |
| Chainguard | consul-1.18-oci-entrypoint-compat | 0 | 1.18.2-r45 |
| Chainguard | consul-1.19-oci-entrypoint | 0 | 1.19.2-r43 |
| Chainguard | consul-1.19-oci-entrypoint-compat | 0 | 1.19.2-r43 |
| Chainguard | consul-1.20-oci-entrypoint | 0 | 1.20.6-r7 |
| Chainguard | consul-1.20-oci-entrypoint-compat | 0 | 1.20.6-r7 |
| Chainguard | consul-1.21-oci-entrypoint | 0 | 1.21.5-r2 |
| Chainguard | consul-1.21-oci-entrypoint-compat | 0 | 1.21.5-r2 |
| Chainguard | consul-1.22 | 0 | 1.22.1-r2 |
| Chainguard | consul-1.22-oci-entrypoint | 0 | 1.22.1-r2 |
| Chainguard | consul-1.22-oci-entrypoint-compat | 0 | 1.22.1-r2 |
| Chainguard | consul-fips-1.19-oci-entrypoint | 0 | 1.19.2-r42 |
| Chainguard | consul-fips-1.19-oci-entrypoint-compat | 0 | 1.19.2-r42 |
| Chainguard | consul-fips-1.20-oci-entrypoint | 0 | 1.20.6-r6 |
| Chainguard | consul-fips-1.20-oci-entrypoint-compat | 0 | 1.20.6-r6 |
| Chainguard | consul-fips-1.21-oci-entrypoint | 0 | 1.21.5-r2 |
| Chainguard | consul-fips-1.21-oci-entrypoint-compat | 0 | 1.21.5-r2 |
| Chainguard | consul-fips-1.22 | 0 | 1.22.2-r1 |
| Chainguard | consul-fips-1.22-oci-entrypoint | 0 | 1.22.2-r1 |
| Chainguard | consul-fips-1.22-oci-entrypoint-compat | 0 | 1.22.2-r1 |
Related vulnerabilities
- CVE-2025-11375 Consul event endpoint is vulnerable to denial of service Same vulnerability
- GO-2025-4081 Consul key/value endpoint is vulnerable to denial of service in… Also affects github.com/hashicorp/consul
- CVE-2025-11374 Consul key/value endpoint is vulnerable to denial of service Also affects github.com/hashicorp/consul
- CVE-2024-10086 A vulnerability was identified in Consul and Consul Enterprise such that the server… Also affects github.com/hashicorp/consul
- CVE-2024-10006 A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using… Also affects github.com/hashicorp/consul
- CVE-2024-10005 A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using… Also affects github.com/hashicorp/consul
- CVE-2025-65637 Logrus is vulnerable to DoS when using Entry.Writer() Also affects consul-1.18-oci-entrypoint
- CVE-2024-51744 golang-jwt is a Go implementation of JSON Web Tokens. Also affects consul-1.18-oci-entrypoint