Affected by GO-2022-1121 and 6 other vulnerabilities

GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

GO-2025-4081: Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul

GO-2025-4082: Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul

internal/

Details

Path	Synopsis
go-sso
oidcauth package oidcauth bundles up an opinionated approach to authentication using both the OIDC authorization code workflow and simple JWT decoding (via static keys, JWKS, and OIDC discovery).	package oidcauth bundles up an opinionated approach to authentication using both the OIDC authorization code workflow and simple JWT decoding (via static keys, JWKS, and OIDC discovery).
oidcauth/internal/strutil
oidcauth/oidcauthtest package oidcauthtest exposes tools to assist in writing unit tests of OIDC and JWT authentication workflows.	package oidcauthtest exposes tools to assist in writing unit tests of OIDC and JWT authentication workflows.
testing
golden
tools
proto-gen-rpc-glue module
proto-gen-rpc-glue/e2e/consul module
protoc-gen-consul-rate-limit module