Consul vulnerable to an authorization bypass in service mesh registration

Consul vulnerable to an authorization bypass in the catalog node-write path

Consul vulnerable to a denial of service in HTTP APIs

Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API

Unauthenticated denial of service via unbounded external gRPC connection acceptance

Consul vulnerable to an authorization bypass in the Connect service mesh

Consul vulnerable to partial arbitrary file read via Vault Connect CA provider

Consul vulnerable to arbitrary file reads through the vault kubernetes authentication provider

Consul vulnerable to a denial of service in the native RPC listener

Consul vulnerable to an authorization bypass in health check registration

Consul vulnerable to an authorization bypass in the catalog deregistration path

Unauthenticated denial of service via unbounded request body processing

Uncontrolled resource consumption in the Consul Connect CA roots endpoint

Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path

Uncontrolled resource consumption in the Consul Connect authorization endpoint

L7 intention authorization bypass via custom public listener

Authorization bypass for session deletion in the transaction API