All products

github.com/hashicorp/boundary

Go · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Hashicorp Boundary workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakesCVE-2026-7776 · GHSA-7X9R-WCGG-W86FVersion ranges need review. github.com/hashicorp/boundary Go High Fix reported
Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of ServiceCVE-2024-12289 · GHSA-XX83-CXMQ-X89MVersion ranges need review. github.com/hashicorp/boundary Go Medium Fix reported
Boundary vulnerable to session hijacking through TLS certificate tamperingCVE-2024-1052 · GHSA-VH73-Q3RW-QX7WVersion ranges need review. github.com/hashicorp/boundary Go High Fix reported
HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service ConfiguredCVE-2023-0690 · GHSA-9VRM-V9XV-X3XRVersion ranges need review. github.com/hashicorp/boundary Go High Fix reported
Hashicorp Boundary vulnerable to clickjackingCVE-2022-36182 · GHSA-XQV2-3VVQ-QG6R github.com/hashicorp/boundary Go Medium No fix reported